Key Custodian
PCIComplianceHubLast updated
A named individual formally assigned responsibility for a cryptographic key or key component. PCI DSS requires custodians to be identified, to acknowledge their responsibilities in writing, and to operate under split knowledge and dual control for clear-text key operations. Custodian records are a routine assessment request, and unsigned or missing acknowledgements are a common finding.