[PCI-DSS] 3.6.3 Secure cryptographic key storage - PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum

		PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum > Payment Card Industry Data Security Standard Frequently Asked Questions (PCI DSS FAQ) > Protect Cardholder Data > [PCI-DSS] Requirement 3: Protect stored cardholder data
[PCI-DSS] 3.6.3 Secure cryptographic key storage

[PCI-DSS] Requirement 3: Protect stored cardholder data Encryption is a critical component of cardholder data protection. If an intruder circumvents other network security controls and gains access to encrypted data, without the proper cryptographic keys, the data is unreadable and unusable to that person. Other effective methods of protecting stored data should be considered as potential risk mitigation opportunities. For example, methods for minimizing risk include not storing cardholder data unless absolutely necessary, truncating cardholder data if full PAN is not needed, and not sending PAN in unencrypted e-mails.

Thread Tools

Search this Thread

Display Modes

03-18-2007, 02:56 AM

admin

Administrator

Join Date: Jul 2002

Posts: 229

[PCI-DSS] 3.6.3 Secure cryptographic key storage

[PCI-DSS] 3.6.3 Secure cryptographic key storage

3.6.3 Verify that key-management procedures are implemented to require secure key storage.

Posting Rules

You may not post new threads

You may not post replies

You may not post attachments

You may not edit your posts

BB code is On

Smilies are On

[IMG] code is On

HTML code is Off

Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[PCI-DSS] 3.6.2 Secure cryptographic key distribution	admin	[PCI-DSS] Requirement 3: Protect stored cardholder data	3	05-03-2010 08:32 AM
[PA-DSS] 5.1.3 Separation of duties between development/test, and production environments	admin	[PA-DSS] 5. Develop secure payment applications	0	03-18-2007 02:49 AM
[PA-DSS] 5.1.1.3 Validation of secure cryptographic storage	admin	[PA-DSS] 5. Develop secure payment applications	0	03-18-2007 02:47 AM
[PA-DSS] 2.7 Securely delete any cryptographic key material or cryptogram stored by previous versions of the payment application, in accordance with industry-accepted standards for secure deletion, as defined, for example the list of approved products maintained by the National Security Agency, or by other State or National standards or regulations. These are cryptographic keys used to encrypt or verify cardholder data	admin	[PA-DSS] 2. Protect stored cardholder data	0	03-18-2007 02:44 AM
[PA-DSS] 2.6 Payment application must implement key management processes and procedures for keys used for encryption of cardholder data	admin	[PA-DSS] 2. Protect stored cardholder data	0	03-18-2007 02:44 AM

Similar Threads

Thread

Thread Starter

Forum

Replies

Last Post

[PCI-DSS] 3.6.2 Secure cryptographic key distribution

admin

[PCI-DSS] Requirement 3: Protect stored cardholder data

05-03-2010 08:32 AM

[PA-DSS] 5.1.3 Separation of duties between development/test, and production environments

admin

[PA-DSS] 5. Develop secure payment applications

03-18-2007 02:49 AM

[PA-DSS] 5.1.1.3 Validation of secure cryptographic storage

admin

[PA-DSS] 5. Develop secure payment applications

03-18-2007 02:47 AM

[PA-DSS] 2.7 Securely delete any cryptographic key material or cryptogram stored by previous versions of the payment application, in accordance with industry-accepted standards for secure deletion, as defined, for example the list of approved products maintained by the National Security Agency, or by other State or National standards or regulations. These are cryptographic keys used to encrypt or verify cardholder data

admin

[PA-DSS] 2. Protect stored cardholder data

03-18-2007 02:44 AM

[PA-DSS] 2.6 Payment application must implement key management processes and procedures for keys used for encryption of cardholder data

admin

[PA-DSS] 2. Protect stored cardholder data

03-18-2007 02:44 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode