4.1 Transmission encryption processes and roles
Requirement 4.1 asks for current policies and procedures for encrypting cardholder data sent over open, public networks, and documented roles for maintaining those protections.
Requirement 4 Protect cardholder data in transmission
Requirement 4 covers strong cryptography for PAN sent over open, public networks and through end-user messaging. Each page covers one second-level requirement.
4.2 Strong cryptography for PAN in transit
Requirement 4.2 requires strong cryptography for PAN sent over open, public networks: trusted and valid certificates, secure protocol versions, a certificate inventory, secure wireless, and encryption of PAN sent through end-user messaging.
