PCI SSCPCI DSSAccess ControlEASYFree question
Why does PCI DSS prohibit shared or group accounts?
- A.Shared accounts prevent tracing actions to individual users, undermining accountability
- B.Shared accounts slow down the login process significantly, frustrating end users during peak hours
- C.Shared accounts violate the software license agreement, risking a costly vendor audit next quarter
- D.Shared accounts confuse the help desk staff, delaying password resets for everyone involved
Why A is correct
Shared accounts eliminate individual accountability since actions cannot be attributed to specific users, making forensic investigation and access control impossible.
Know someone studying for PCI DSS? Send them this one.