PCI PIN Security
Normative Annex B: Key-injection facilities – PCI PIN Security

PCI PIN Security B:13-9.3: PCI PIN B:13-9.3

What does B:13-9.3 require?

Access to and use of the PC are monitored, and each key load is logged. Logs are retained for three years or more and reviewed every week or more often, the review being documented by an authorised person who can enter neither the room nor the PC. The logs record badge and manual room entry, operating-system and application sign-ons, the IDs and serial numbers of devices loaded with the date, time and operator, and video surveillance held for 45 days or more.

Maintained by Gerard BlokdykControl text last updated

Other controls in Normative Annex B: Key-injection facilities – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.