Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security
PCI PIN Security 22-1.5: PCI PIN 22-1.5
What does 22-1.5 require?
The events that may indicate compromise are identified and include missing SCDs, tamper-evident seals or envelope numbers or times that disagree with the logs, seals or envelopes opened or attacked, signs of unauthorised physical or logical access, and any failure to document that a key was under dual control and split knowledge since creation.