PCI SSC publishes Card Production and Provisioning Logical Security Requirements

Original title: Card Production and Provisioning Logical Security Requirements

PCI SSC has published the Card Production and Provisioning Logical Security Requirements, a new standard addressing security controls for logical systems involved in card production and provisioning processes. This requirement establishes mandatory security practices for organizations that manufacture, personalize, or provision payment cards, covering system access, data protection, and operational controls throughout the card production lifecycle.

What changed

• PCI SSC introduces Card Production and Provisioning Logical Security Requirements as a new standard to govern security practices in card manufacturing and personalization environments.
• The standard establishes mandatory logical security controls for systems and processes involved in card production, including access controls, data protection, and system monitoring requirements.
• Organizations engaged in card production or provisioning activities must now comply with this new standard as part of their overall PCI DSS compliance obligations.

Who is affected

Organizations involved in payment card production, manufacturing, personalization, and provisioning; payment card issuers and their service providers globally.