From 20 September to 20 October, PCI SSC stakeholders have the opportunity to review and provide feedback on the next draft of the PCI Card Production and Provisioning – Physical and Logical Security Requirements Report on Compliance (ROC) templates. The PCI Card Production and Provisioning Standard ensures the strongest protections for customer payment information during card production and provisioning, which includes: card manufacturing; magnetic-stripe card encoding and embossing; card personalization; chip initializing, embedding, and personalization; card storing; shipping and mailing; and the process of adding cardholder account information to a device via an over-the-air or over-the-internet communication channel.
The PCI Card Production and Provisioning – Physical and Logical Security Requirements Report on Compliance (ROC) templates have been updated to include test procedures. They provide a detailing of procedures for card vendor assessors to follow when conducting security assessments of card vendors against the PCI Card Production and Provisioning Standards.
As part of the standards development process, PCI Participating Organizations, Affiliate and Strategic Members and Qualified Security Assessors (QSA) are invited to review and provide feedback on the PCI Card Production and Provisioning – Physical and Logical Security Requirements ROC templates.
The comment period runs from 20 September to 20 October 2017.
