PCI Standards Update—What’s New (I31a)
This talk will provide an update on the PCI SSC standards and activities with respect to cryptography, key management, and device security. PCI SSC have 14 standards and many more guidance documents which reference cryptography and key management as baseline controls, and this talk will outline how PCI SSC have continued to maintain and evolve their standards with respect to how cryptography must be used and secured. The talk will outline the new PCI HSM requirements which directly address Cloud HSM usage, updates to the definition of strong cryptography, and the use of COTS devices for security requiring cryptographic controls.