PCI PIN Security
Normative Annex A2: Certification and registration authority operations – PCI PIN Security

PCI PIN Security A2:25-6: PCI PIN A2:25-6

What does A2:25-6 require?

Audit trails record every key-management operation (generating, loading, transmitting, backing up, recovering and destroying keys, any key compromise, and generating and revoking certificates), who authorised each one and who handled the key material, and the logs are protected against being changed or destroyed.

Maintained by Gerard BlokdykControl text last updated

Other controls in Normative Annex A2: Certification and registration authority operations – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.