✅ Requires biometrics or PIN: Only authorised users can use the cards

✅ Can be blocked immediately: Cards can be removed or updated in real time via the company's systems

❌ Can be lost or stolen: No extra layer of security if someone finds the card

❌ Manual blocking: Blocking requires administrative processing and can take time

✅ Automatic access list updates: Cards can be updated or deactivated remotely

✅ No risk of copying: Wallet cards use dynamic keys that cannot be cloned

❌ More difficult to update access lists: Requires physical card replacements

❌ Can be copied or counterfeited: Card technology such as RFID can be cloned with the right equipment

✅ Automated access control: Cards can be issued and revoked instantly

✅ Remote card deletion in case of loss: Can be deactivated via Find My iPhone or IT systems

❌ Requires manual card management: New employees must physically collect cards, and lost cards must be replaced

❌ No remote wipe: Misplaced cards can be used until someone manually blocks them

✅ Cards work offline: NFC-based access does not require internet

✅ Redundancy with Apple ID: User can add cards to a new device if needed

❌ Physical cards can be lost or damaged: Requires replacement

❌ No easy backup: Must be ordered and re-manufactured

✅ Real-time usage measurement: All NFC transactions can be monitored and analyzed in the access system

✅ Notification capability: Suspicious usage can be flagged automatically

❌ Limited logging: Many physical card systems have no tracking of individual users

❌ No notification of misuse: If someone uses a lost card, it will not be detected until a manual check

A.11.1 – Network Security Protecting information in transit.

✅ End-to-end encryption: Card information is transmitted using TLS 1.2/1.3

✅ One-time keys for NFC: Prevents card information from being reused or intercepted

❌ Weaker security: RFID and magnetic stripe cards can be copied

❌ No dynamic encryption: Data can be extracted from many older access systems

✅ Cards are isolated in the Secure Enclave: Data cannot be retrieved by Apple or third-party apps

✅ Secure card issuance: Only authorised vendors can add cards to Wallet

❌ Requires physical distribution: Cards must be produced, shipped, and handed out

❌ Cannot be centrally managed: No cloud solution for fast card administration

✅ Automatic deactivation in case of loss: Cards can be blocked immediately by the user or the IT department

✅ Suspicious activity logging: Can alert you to unusual usage, such as attempts to access outside of working hours

❌ Manual blocking required: Requires contacting the security department

❌ No logging in case of card theft: If someone uses a stolen card, it will not be detected without checking

✅ GDPR compliant: Wallet does not store any personal data in the cloud, and the user has full control

✅ PCI DSS and ISO 27001 compliant: Apple Wallet meets international security standards

❌ May lead to GDPR violations: Physical cards can expose personal data if lost

❌ No certifications: Dependent on third-party vendors who may not meet the same security requirements

✅ Strong encryption: Wallet data is stored with AES-256 encryption and is not accessible to Apple

✅ User has full control: Cards can be deleted at any time

❌ Cards may contain sensitive information: Name, title, and employee number may be visible on the card

❌ No option for remote deletion: A lost card can be misused without being able to be deleted remotely