Protect Stored Cardholder Data with Strong Cryptography
What this control requires
Implement strong cryptography (AES-256 or equivalent) for stored cardholder data. Never store sensitive authentication data after authorisation. Implement key management procedures covering key generation, distribution, storage, replacement, destruction and split knowledge/dual control for cryptographic key custodians. Document the data retention and disposal policy.
Other PCI DSS controls
PCI_DSS-CTRL-001 - Daily safeguarding reconciliationPCI_DSS-CTRL-002 - Critical ICT incident reportingPCI_DSS-CTRL-003 - GDPR breach notification workflowPCI_DSS-CTRL-004 - AML suspicious transaction monitoringPCI_DSS-CTRL-005 - Quarterly PCI vulnerability assessmentPCI_DSS-CTRL-006 - Outsourcing provider oversightPCI_DSS-CTRL-007 - DORA Register of Information maintenancePCI_DSS-CTRL-008 - CTIF suspicious activity escalationPCI_DSS-CTRL-009 - NIS2 cyber resilience testingPCI_DSS-CTRL-010 - Instant payment availability monitoringPCI-AUTH-001 - Implement Strong Access Control for Cardholder DataPCI-LOG-001 - Implement Audit Log Management for CDE