PCI (Payment Card Industry Security Standard)_Req 3.5.1

PCI (Payment Card Industry Security Standard)

Protect stored cardholder data

Req 3.5.1

3.5.1 Additional requirement for service providers only: maintain a documented description of the cryptographic architecture that includes: – details of all algorithms protocols and keys used for the protection of cardholder data including key strength and expiry date – description of the key usage for each key – inventory of any HSMs and other SCDs used for key management note: this requirement is a best practice until January 31 2018 after which it becomes a requirement.

Maintaining current documentation of the cryptographic architecture enables an entity to understand the algorithms protocols and cryptographic keys used to protect cardholder data as well as the devices that generate use and protect the keys. This allows an entity to keep pace with evolving threats to their architecture enabling them to plan for updates as the assurance levels provided by different algorithms/key strengths changes. Maintaining such documentation also allows an entity to detect lost or missing keys or key-management devices and identify unauthorized additions to their cryptographic architecture.


Click here to Start your FREE trial today!

Explainer video


What is a Cybersecurity Compliance Framework?

You don’t need to clutter your security and privacy programs with an ever-increasing number of tools as they become more sophisticated. The Lionfish platform offers a one-stop solution to track progress and monitor any framework, from custom-built ones to highly-specialized and in-demand top security and privacy frameworks and certifications.

With the Lionfish platform, every framework is supported with guided scoping, policies, controls, automated evidence collection, and continuous monitoring, ensuring efficient preparation for audits or attestation in minimal time.

The Lionfish platform is compatible with a wide range of security and privacy frameworks, including:

Click here to Start your FREE trial today!

Explainer video