9.5 — Point-of-interaction devices are protected from tampering

Requirement

Point-of-interaction devices that capture card data by direct physical interaction are listed, periodically inspected for tampering or substitution, and personnel are trained to recognise attempted tampering and to verify the identity of anyone claiming to service the devices.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.