PCI SSF
Secure Software Standard: core requirements (Control Objectives 1 to 12) – PCI SSF

PCI SSF 3.2: Secure Software Standard 3.2 (Sensitive Data Retention)

Transient sensitive data is kept only for as long as a legitimate business purpose requires.

Maintained by Gerard BlokdykControl text last updated

Other controls in Secure Software Standard: core requirements (Control Objectives 1 to 12) – PCI SSF

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI SSF controls