Appendix B: Applicability of Requirements Having identified functionalities, a device under evaluation needs to meet or exceed requirements formed by the union of all requirements applicable to each of the functionalities. Please refer to Appendix A: Requirements Applicability Matrix. For compound devices, it is possible that these requirements are met or exceeded by the relevant module(s), if the corresponding requirements are fully covered; however it remains up to the testing house’s judgment to evaluate on a case-by-case basis whether supplementary testing is required. To determine which requirements apply to a device, the following steps must take place: Identify which of the functionalities the device supports. For each of the supported functionalities, report any marking from the functionality column to “x” the baseline column. stands for in which case the requirement must be “x” “applicable,” considered for vendor questionnaire and possibly evaluation. a to is data is stack Conditions Entry MSR Keys module ICCR Protects Device PIN Device cardholder compound Requirement Feedback TCP/IP Implements account Core Requirements Modules Core Physical Security Requirements A1 x A2 x x A3 x x A4 x x A5 x A6 x A7 x If keypad that can be used to enter A8 x non-PIN data. A9 x A10 x A11 x x a to is data is stack Conditions PIN MSR Keys Entry module ICCR Protects Device Device compound cardholder Requirement Feedback TCP/IP Implements account Core Logical Security Requirements
Appendix B: Applicability of Requirements Having identified functionalities, a device under evaluation needs to meet or exceed requirements formed by the union of all requirements applicable to each of the functionalities. Please refer to Appendix A: Requirements Applicability Matrix. For compound devices, it is possible that these requirements are met or exceeded by the relevant module(s), if the corresponding requirements are fully covered; however it remains up to the testing house’s judgment to evaluate on a case-by-case basis whether supplementary testing is required. To determine which requirements apply to a device, the following steps must take place: Identify which of the functionalities the device supports. For each of the supported functionalities, report any marking “x” from the functionality column to the baseline column. “x” stands for “applicable,” in which case the requirement must be considered for vendor questionnaire and possibly evaluation. Requirement PIN Entry Keys ICCR MSR Feedback to cardholder Device is a module Device is compound Implements TCP/IP stack Protects account data Conditions Core Requirements Modules Core Physical Security Requirements A1 x A2 x x A3 x x A4 x x A5 x A6 x A7 x A8 x If keypad that can be used to enter non-PIN data. A9 x A10 x A11 x x Requirement PIN Entry Keys ICCR MSR Feedback to cardholder Device is a module Device is compound Implements TCP/IP stack Protects account data Conditions Core Logical Security Requirements
PCI_PTS_POI_SRs_v3_1_FORM.docx