We are currently in the STAR National Network that has a 50 page PIN Security Review that is completed every two years as well our processing Network is now requiring a PIN Security Due Deligence. Does anyone have any sample PIN Security Policies???

This is all related to PIN KEY and DES KEY security. Even though we do not generate or store our own PIN KEYS, this is still being required.

Anyone else run into this issue???

It is addressed in our Security/Encryption Key Management Policy. It basically states that we do not issue debit cards or PIN's. This is outsourced to our vendor who mails the debit card and PIN directly to our customers in separate mailings.

Hope this helps!