Severity: Low New document Global
PCI SSC publishes Card Production and Provisioning Physical Security Requirements
Original title: Card Production and Provisioning Physical Security Requirements
- Published
- Source: pcisecuritystandards.org
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
PCI Security Standards Council has published Card Production and Provisioning Physical Security Requirements as a new standard to establish physical security controls for card production and provisioning operations. This standard sets requirements for organizations involved in manufacturing, personalizing, and issuing payment cards to protect against unauthorized access, theft, and tampering during production processes. Organizations handling card production or provisioning activities must implement the physical security measures defined in this standard to comply with PCI standards ecosystem.
What changed
- PCI SSC introduces a dedicated standard for physical security in card production and provisioning, covering facility access controls, environmental monitoring, and operational security measures during card manufacturing and personalization processes
- The standard establishes requirements for protecting card stock, personalization equipment, and finished card inventory from unauthorized access and tampering
- Requirements address personnel security, background screening, and access controls for employees and contractors involved in card production activities
- The standard includes provisions for monitoring and auditing of physical security controls to ensure compliance and detect security breaches
Who is affected
Card production facilities, payment card issuers, card manufacturers, third-party service providers involved in card provisioning and personalization, globally
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.