CRY-03—Encryption Key Storage

1. Inspect and review the key management standard, to ensure that the management operations are using one of the listed options below, for encrypting and decrypting cardholder data: -Key-encrypting key is at least as strong as the data-encrypting key and is stored separately from the data-encrypting key -Stored within a cryptographic device -Keys are stored as at least two full-length key components or key shares 2. Inspect the process and validate that one of the above methods are being used to protect the keys.