PCI SSC publishes Card Production and Provisioning Physical Security Requirements

Original title: Card Production and Provisioning Physical Security Requirements

PCI Security Standards Council has published Card Production and Provisioning Physical Security Requirements as a new standard to establish physical security controls for card production and provisioning operations. This standard sets requirements for organizations involved in manufacturing, personalizing, and issuing payment cards to protect against unauthorized access, theft, and tampering during production processes. Organizations handling card production or provisioning activities must implement the physical security measures defined in this standard to comply with PCI standards ecosystem.

What changed

• PCI SSC introduces a dedicated standard for physical security in card production and provisioning, covering facility access controls, environmental monitoring, and operational security measures during card manufacturing and personalization processes
• The standard establishes requirements for protecting card stock, personalization equipment, and finished card inventory from unauthorized access and tampering
• Requirements address personnel security, background screening, and access controls for employees and contractors involved in card production activities
• The standard includes provisions for monitoring and auditing of physical security controls to ensure compliance and detect security breaches

Who is affected

Card production facilities, payment card issuers, card manufacturers, third-party service providers involved in card provisioning and personalization, globally