PCI DSS v4.0/Requirement 03: Protect Stored Account Data/49 of 250
3.6.1.3Cryptographic keys used to protect stored account data are secured
Control family: Requirement 03: Protect Stored Account Data
Control description
Defined Approach Requirements:
Access to clear text cryptographic key components is restricted to the fewest number of custodians necessary.
Defined Approach Testing Procedures:
3.6.1.3 Examine user access lists to verify that access to clear text cryptographic key components is restricted to the fewest number of custodians necessary.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.