PCI DSS 1.1 Audit Work Program Templates Free Download

PCI DSS 1.1 Audit Work Program Templates Free Download

Control 1 - All cardholder-entered PINs are processed in equipment that conforms to the requirements for Tamper-Resistant Security Modules (TRSMs). PINs must never appear in the clear outside of a TRSM

Control 2 - All cardholder PINs processed online are encrypted and decrypted using an approved cryptographic technique that provides a level of security compliant with international and industry standards.

Control 3 - All cardholder PINs processed offline using IC Card technology must be protected in accordance with the requirements in Book 2 of the EMV2000 IC Card Specifications for Payment Systems.