PCI SSCPCI DSSAccess ControlEASYFree question
What does PCI DSS Requirement 8 require regarding user identification?
- A.Each user must be assigned a unique identification (unique ID) for access to system components
- B.User IDs are only required for remote access
- C.Shared accounts are acceptable for efficiency, which v4.0 requires only for vendor and remote accounts, leaving internal staff exempt
- D.Only administrators need unique IDs
Why A is correct
Requirement 8 mandates that every individual with computer access be assigned a unique ID, ensuring that actions on critical data and systems can be traced to a known and authorized individual.
Know someone studying for PCI DSS? Send them this one.