PCI SSCPCI DSSAccess ControlEASYFree question
What does PCI DSS Requirement 8 require regarding user identification?
- A.Each user must be assigned a unique identification (unique ID) for access to system components
- B.Each workstation must be assigned a unique hardware fingerprint (device ID) before connecting to system components
- C.Each department must maintain a shared access roster (department log) for entry to system components
- D.Each system must generate a random session key (session token) at each login
Why A is correct
Requirement 8 mandates that every individual with computer access be assigned a unique ID, ensuring that actions on critical data and systems can be traced to a known and authorized individual.
Know someone studying for PCI DSS? Send them this one.