Back

Record trusted keys and certificates in the asset inventory.


CONTROL ID
15486
CONTROL TYPE
Data and Information Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained. (4.2.1.1, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Requirements, Version 4.0)
  • Examine documented policies and procedures to verify processes are defined for the entity to maintain an inventory of its trusted keys and certificates. (4.2.1.1.a, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Testing Procedures, Version 4.0)
  • Examine the inventory of trusted keys and certificates to verify it is kept up to date. (4.2.1.1.b, Payment Card Industry Data Security Standard Requirements and Testing Procedures, Defined Approach Testing Procedures, Version 4.0)
  • An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained. (4.2.1.1, Self-Assessment Questionnaire D for Merchants and Attestation of Compliance for use with PCI DSS Version 4.0)
  • An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained. (4.2.1.1, Self-Assessment Questionnaire D for Service Providers and Attestation of Compliance for use with PCI DSS Version 4.0)