Which of the following principles must be enforce by the HSA Access Control system?

The PCI PIN Security Standard mandates dual control for sensitive cryptographic operations involving a Hardware Security Appliance (HSA), also known as a Secure Cryptographic Device (SCD). Dual control is a process requiring two or more individuals to complete a task, ensuring no single person can compromise a key or function. For simultaneous operations like loading clear-text key components, the standard requires the action to be "performed by at least two people." This requirement inherently necessitates the physical presence of both individuals (dual presence) to execute their distinct parts of the task (dual control). Therefore, the complete access control system, encompassing both technical and procedural controls for the HSA, must enforce both principles.

A. Dual control: This is correct but incomplete. Enforcing dual control for simultaneous tasks on an HSA necessitates the physical presence of the operators.

B. Dual presence: This is also correct but incomplete. Mere presence is insufficient; the system must enforce that two separate individuals perform distinct actions (dual control).

D. Dual guard entry when required: This describes a facility-level physical security control, not a logical access control principle enforced by the HSA's system for cryptographic operations.

1. PCI Security Standards Council. (2018). PCI PIN Security Requirements and Testing Procedures Version 3.0.

Requirement 6-3, Page 39: "The loading of clear-text key components into a secure cryptographic device (SCD) must be performed using, at a minimum, dual control."

Requirement 6-4, Page 40: "The entry of clear-text key components into an SCD must be performed by at least two people." This phrasing directly implies both the control structure (dual control) and the physical requirement (dual presence).

Glossary, Page 100: The definition of "Dual Control" as a process where two or more entities are "operating in concert" supports the need for simultaneous presence for many key management activities.