CISA: Certified Information Systems Auditor

PINs and PIN blocks are sensitive authentication data used to authenticate the cardholder. They must be securely managed, processed, and transmitted, and their storage after authorization is prohibited even if encrypted. Unencrypted retention on a central computer therefore presents a particularly serious compromise risk because it exposes cleartext PIN data in a centralized environment.