PCI CCA case studies
PCI CCA · Put your knowledge to work in context.
PCI CCA refers to the Card Production Security Assessor (CPSA) qualification listed by the PCI Security Standards Council under its PCI Qualified Professionals program. It is aimed at individuals and organizations that assess and validate compliance of card production and provisioning environments against the Council's Card Production and Provisioning security requirements, published in two companion documents: Physical and Logical. The PCI CCA case studies are 5 cases and about 3,031 words.
1Converting an Office Suite into a Card Data Room
A personalization bureau is converting a 1970s office suite into a Card Data Room for storing 60,000 blank contactless cards before personalization. The room has steel-stud drywall partitions that stop at a suspended acoustic ceiling; the plenum above the ceiling is continuous with the neighboring tenant's suite.
686 words, about 3 min2Seal Discrepancy at Card Stock Receiving
A card production facility receives a scheduled delivery of 24,000 preprinted magnetic-stripe card bodies from a transport courier. The manifest lists three sealed totes with seal numbers 77120, 77121, and 77122.
583 words, about 3 min3Key Ceremony with an Untrained Backup Custodian
A card personalization bureau is bringing a new HSM online for EMV key generation. The ceremony procedure requires three key custodians, each holding one share, with dual control for every step; no single person may know or hold all shares.
588 words, about 3 min4Shared SFTP Account for Cardholder Data Transfer
An issuer sends daily personalization files containing primary account numbers, names, and track-equivalent data to a bureau over an MPLS circuit. The files are pushed by an issuer-side job to an SFTP server in the bureau's demilitarized zone.
585 words, about 3 min5Misprinted Card Destruction and Chain of Custody
A personalization line produces 9,600 EMV cards for a single issuer. A printer calibration error causes the magnetic stripe encoding to fail on 1,200 cards; the chip personalization succeeded and the cards carry embossed PANs.
589 words, about 3 min