Which standard addresses the protection of sensitive data at the point of interaction devices and their cryptographic keys used with that protection?

Which standard addresses the protection of sensitive data at the point of interaction devices and their cryptographic keys used with that protection?

• A. PCI PTS - PIN Security
• B. PCI PTS - POI
• C. PCI PTS - HSM
• D. PCI Card Production

Answer: (B)

This question tests understanding of which PCI PTS standard covers protecting sensitive data at the point of interaction devices and the cryptographic keys used with that protection. Point of Interaction devices include card readers and PIN pads where data is captured in the moment of payment. The PCI PTS standard for POI specifically sets security requirements for these devices, including how they protect sensitive data on the device and how cryptographic keys are managed and safeguarded there. It also covers aspects like secure key injection and tamper-resistant hardware, which are essential for maintaining data integrity right at the device level. This focus differentiates it from PIN Security, which centers on PIN data handling itself, and from HSM, which relates to secure back-end cryptographic processors rather than the on-device protection at the point of interaction. Card Production governs secure card manufacturing rather than on-device data protection.

This question tests understanding of which PCI PTS standard covers protecting sensitive data at the point of interaction devices and the cryptographic keys used with that protection. Point of Interaction devices include card readers and PIN pads where data is captured in the moment of payment. The PCI PTS standard for POI specifically sets security requirements for these devices, including how they protect sensitive data on the device and how cryptographic keys are managed and safeguarded there. It also covers aspects like secure key injection and tamper-resistant hardware, which are essential for maintaining data integrity right at the device level. This focus differentiates it from PIN Security, which centers on PIN data handling itself, and from HSM, which relates to secure back-end cryptographic processors rather than the on-device protection at the point of interaction. Card Production governs secure card manufacturing rather than on-device data protection.