All hardware and software used for PIN processing shall be implemented such that: Their correct functioning can be assured. They cannot be modified or accessed without detection. The data cannot be inappropriately accessed, modified or misused.