PCI PIN Security
Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

PCI PIN Security 23-2: PCI PIN 23-2

What does 23-2 require?

A host MFK and any variant of it, used to encipher keys stored locally, is never used beyond the logical configuration in which that MFK is held, for example to carry keys between platforms that run under different operational and security policies.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls