BS ISO 13491-1:2016

This part of ISO13491 specifies the security characteristics for secure cryptographic devices (SCDs) based on the cryptographic processes defined in ISO9564 , ISO16609 , and ISO11568 . This part of ISO13491 has two primary purposes: to state the security characteristics concerning both the operational characteristics of SCDs and the management of such devices throughout all stages of their life cycle; to provide guidance for methodologies to verify compliance with those requirements. This information is contained in AnnexA. ISO13491‑2 specifies checklists to be used to evaluate secure cryptographic devices (SCDs) incorporating cryptographic processes as specified in ISO9564‑1 , ISO9564‑2 , ISO16609 , ISO11568‑1 , ISO11568‑2 , ISO11568‑3 , ISO11568‑4 , ISO11568‑5 , and ISO11568‑6 in the financial services environment. AnnexA provides an informative illustration of the concepts of security levels described in this part of ISO13491 as being applicable to SCDs. This part of ISO13491 does not address issues arising from the denial of service of an SCD. Specific requirements for the security characteristics and management of specific types of SCD functionality used in the retail financial services environment are contained in ISO13491‑2 .