Split Knowledge
PCIComplianceHubLast updated
A control in which a cryptographic key is divided into components and no single person holds enough of them to reconstruct the key. Each custodian knows only their own component. PCI DSS requires split knowledge together with dual control for manual clear-text key management operations, so that no individual can obtain or use a key alone. Split knowledge answers who knows what; dual control answers who must be present to act.