PCI SSC publishes Key Management and Operations Standard v1.0

Original title: PCI Key Management and Operations (KMO)™ Standard v1.0 published

The PCI Security Standards Council has published the new PCI Key Management and Operations (KMO)™ Standard v1.0, establishing security and test requirements for entities managing cryptographic key systems used to protect payment card account data. This standard provides specific guidance for organizations that operate and maintain systems using cryptographic keys for account data security. Entities involved in key management operations must now comply with the defined security requirements and undergo testing according to the standard's test requirements.

What changed

• PCI KMO Standard v1.0 published with defined security requirements for entities managing cryptographic key systems used for account data protection

Who is affected

Entities involved in the operation and management of systems using cryptographic keys for payment card account data security globally