Financial services - Secure cryptographic devices (retail) - Part 1: Concepts, requirements and evaluation methods
ISO 13491-1:2016 specifies the security characteristics for secure cryptographic devices (SCDs) based on the cryptographic processes defined in ISO 9564, ISO 16609, and ISO 11568.
ISO 13491-1:2016 has two primary purposes:
- to state the security characteristics concerning both the operational characteristics of SCDs and the management of such devices throughout all stages of their life cycle;
? to provide guidance for methodologies to verify compliance with those requirements. This information is contained in Annex A.
ISO 13491-2 specifies checklists to be used to evaluate secure cryptographic devices (SCDs) incorporating cryptographic processes as specified in ISO 9564-1, ISO 9564-2, ISO 16609, ISO 11568-1, ISO 11568-2, ISO 11568-3, ISO 11568-4, ISO 11568-5, and ISO 11568-6 in the financial services environment.
Annex A provides an informative illustration of the concepts of security levels described in this part of ISO 13491 as being applicable to SCDs.
ISO 13491-1:2016 does not address issues arising from the denial of service of an SCD.
Specific requirements for the security characteristics and management of specific types of SCD functionality used in the retail financial services environment are contained in ISO 13491‑2.
Please first log in with a verified email before subscribing to alerts.
Your Alert Profile lists the documents that will be monitored. If the document is revised or amended, you will be notified by email. You may delete a document from your Alert Profile at any time. To add a document to your Profile Alert, search for the document and click “alert me”.
Your Alert Profile lists the documents that will be monitored. If the document is revised or amended, you will be notified by email. You may delete a document from your Alert Profile at any time. To add a document to your Profile Alert, search for the document and click “alert me”.
Add to Alert
Already Subscribed to this document.
Your Alert Profile lists the documents that will be monitored. If the document is revised or amended, you will be notified by email. You may delete a document from your Alert Profile at any time. To add a document to your Profile Alert, search for the document and click “alert me”.
PDF Document format
Documents sold on the ANSI Webstore are in electronic Adobe Acrobat PDF format.
DRM protected documents
Some PDF files are protected by Digital Rights Management (DRM) at the request of the copyright holder. You can download and open this file to your own computer but DRM prevents opening this file on another computer, including a networked server. Some copyright holders may impose other restrictions that limit document printing and copy/paste of documents.
Non printable documents
Those documents cannot be printed at the request of the copyright holder.
Content Provider International Organization for Standardization [iso]
We have no amendments or corrections for this standard.
Are the documents at the ANSI Webstore in electronic Adobe Acrobat PDF format only?
Documents sold on the ANSI Standards Store are in electronic Adobe Acrobat PDF format.
Standard Subscriptions
This standard is also available to be included in Standards Subscriptions. Standards Subscriptions from ANSI provides a money-saving, multi-user solution for accessing standards.
Subscription pricing is determined by: the specific standard(s) or collections of standards, the number of locations accessing the standards, and the number of employees that need access.
As the voice of the U.S. standards and conformity assessment system, the American National Standards Institute (ANSI) empowers its members and constituents to strengthen the U.S.
marketplace position in the global economy while helping to assure the safety and health of consumers and the protection of the environment.
