PCI DSS Requirement 9 – Changes from v3.2.1 to v4.0 Explained
VISTA InfoSec
MARCH 5, 2024
narrows its target to restrict direct console access in sensitive areas, makes locking unattended consoles an explicit requirement, and adjusts testing to verify this specific locking. specifically to visitor access procedures. Broadened to observe and interview for CDE-wide visitor management procedures. PCI DSS v4.0
Let's personalize your content