PCI DSS v4.0/Requirement 03: Protect Stored Account Data/38 of 250
3.3.2Sensitive authentication data (SAD) is not stored after authorization
Control family: Requirement 03: Protect Stored Account Data
Control description
Defined Approach Requirements:
SAD that is stored electronically prior to completion of authorization is encrypted using strong cryptography.
Defined Approach Testing Procedures:
3.3.2 Examine data stores, system configurations, and/or vendor documentation to verify that all SAD that is stored electronically prior to completion of authorization is encrypted using strong cryptography.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.