Skip to main content

💼 9.9 Protect devices that capture payment card data via direct physical interaction with the card from tampering and substitution.

  • Contextual name: 💼 9.9 Protect devices that capture payment card data via direct physical interaction with the card from tampering and substitution.

  • ID: /frameworks/pci-dss-v3.2.1/09/09

  • Located in: 💼 9 Restrict physical access to cardholder data

Description​

These requirements apply to card-reading devices used in card-present transactions (that is, card swipe or dip) at the point of sale. This requirement is not intended to apply to manual key-entry components such as computer keyboards and POS keypads.

Similar​

  • Sections
    • /frameworks/pci-dss-v4.0/09/05/01
  • Internal
    • ID: dec-c-a5724c5b

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v4.0 → 💼 9.5.1 POI devices that capture payment card data via direct physical interaction with the payment card form factor are protected from tampering and unauthorized substitution.3

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v4.0 → 💼 9.5.1 POI devices that capture payment card data via direct physical interaction with the payment card form factor are protected from tampering and unauthorized substitution.3

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 9.9.1 Maintain an up-to-date list of devices.
💼 9.9.2 Periodically inspect device surfaces to detect tampering, or substitution.
💼 9.9.3 Provide training for personnel to be aware of attempted tampering or replacement of devices.