8.2.3User identification and related accounts for users and administrators are strictly managed throughout an account’s lifecycle

Defined Approach Requirements:

Additional requirement for service providers only: Service providers with remote access to customer premises use unique authentication factors for each customer premises.

Defined Approach Testing Procedures:

8.2.3 Additional testing procedure for service provider assessments only: Examine authentication policies and procedures and interview personnel to verify that service providers with remote access to customer premises use unique authentication factors for remote access to each customer premises.