💼 9.9 Protect devices that capture payment card data via direct physical interaction with the card from tampering and substitution.

• Contextual name: 💼 9.9 Protect devices that capture payment card data via direct physical interaction with the card from tampering and substitution.

• ID: /frameworks/pci-dss-v3.2.1/09/09

• Located in: 💼 9 Restrict physical access to cardholder data

Description

These requirements apply to card-reading devices used in card-present transactions (that is, card swipe or dip) at the point of sale. This requirement is not intended to apply to manual key-entry components such as computer keyboards and POS keypads.

Similar

• Sections
  • /frameworks/pci-dss-v4.0/09/05/01
• Internal
  • ID: dec-c-a5724c5b

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 PCI DSS v4.0 → 💼 9.5.1 POI devices that capture payment card data via direct physical interaction with the payment card form factor are protected from tampering and unauthorized substitution.	3		1

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 PCI DSS v4.0 → 💼 9.5.1 POI devices that capture payment card data via direct physical interaction with the payment card form factor are protected from tampering and unauthorized substitution.	3		1

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 9.9.1 Maintain an up-to-date list of devices.			1
💼 9.9.2 Periodically inspect device surfaces to detect tampering, or substitution.
💼 9.9.3 Provide training for personnel to be aware of attempted tampering or replacement of devices.

Policies (1)

Policy	Logic Count	Flags
📝 Google Cloud Asset Inventory API is not enabled 🟢	1	🟢 x6