Severity: Medium New document Global Action required
PCI SSC publishes Key Management and Operations Standard v1.0
Original title: PCI Key Management and Operations (KMO)™ Standard v1.0 published
- Published
- Source: blog.pcisecuritystandards.org
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
The PCI Security Standards Council has published the new PCI Key Management and Operations (KMO)™ Standard v1.0, establishing security and test requirements for entities managing cryptographic key systems used to protect payment card account data. This standard provides specific guidance for organizations that operate and maintain systems using cryptographic keys for account data security. Entities involved in key management operations must now comply with the defined security requirements and undergo testing according to the standard's test requirements.
What changed
- PCI KMO Standard v1.0 published with defined security requirements for entities managing cryptographic key systems used for account data protection
Who is affected
Entities involved in the operation and management of systems using cryptographic keys for payment card account data security globally
What to do
The standard defines security requirements and test requirements for entities managing systems that use cryptographic keys for account data security.
AI-assisted summary of the official document; the official text prevails. Not legal advice.