Which standard covers physical, logical and device security requirements for securing Hardware Security Modules (HSM)?

Which standard covers physical, logical and device security requirements for securing Hardware Security Modules (HSM)?

• A. PCI Card Production
• B. PCI PTS - POI
• C. PCI PTS - HSM
• D. PCI PTS - PIN Security

Answer: (C)

The main idea tested is identifying which PCI PTS standard specifically targets Hardware Security Modules. The PCI PTS family defines security requirements for devices used in the payment ecosystem, and the HSM variant is the one focused on hardware security modules. This standard lays out how an HSM must be secured physically (tamper resistance, secure enclosure), logically (secure key storage, access controls, protected cryptographic operations), and at the device level (firmware integrity, secure lifecycle, anti-tamper features). It ensures HSMs used to manage keys and carry out cryptographic functions for payment systems meet PCI's security expectations. Other options don’t fit because one is about producing cards, another covers payment terminal devices at the point of interaction, and another focuses on securing PIN entry and PIN processing.

The main idea tested is identifying which PCI PTS standard specifically targets Hardware Security Modules. The PCI PTS family defines security requirements for devices used in the payment ecosystem, and the HSM variant is the one focused on hardware security modules. This standard lays out how an HSM must be secured physically (tamper resistance, secure enclosure), logically (secure key storage, access controls, protected cryptographic operations), and at the device level (firmware integrity, secure lifecycle, anti-tamper features). It ensures HSMs used to manage keys and carry out cryptographic functions for payment systems meet PCI's security expectations.

Other options don’t fit because one is about producing cards, another covers payment terminal devices at the point of interaction, and another focuses on securing PIN entry and PIN processing.