8.2.1User identification and related accounts for users and administrators are strictly managed throughout an account’s lifecycle

Defined Approach Requirements:

All users are assigned a unique ID before access to system components or cardholder data is allowed.

Defined Approach Testing Procedures:

8.2.1.a Interview responsible personnel to verify that all users are assigned a unique ID for access to system components and cardholder data.

8.2.1.b Examine audit logs and other evidence to verify that access to system components and cardholder data can be uniquely identified and associated with individuals.