PCI PIN Security CO-11: Secret and Private Keys and Key Components Are Generated, Conveyed, and Used in a Manner That Prevents or Detects Their Unauthorized Disclosure, Modification, or Substitution
End-to-end controls must ensure secret and private keys and their components are protected throughout their lifecycle, with mechanisms to detect any unauthorized disclosure, modification, or substitution.