PCI DSS v4.0/Requirement 08: Identify Users and Authenticate Access to System Components/121 of 250
8.3.2Strong authentication for users and administrators is established and managed
Control family: Requirement 08: Identify Users and Authenticate Access to System Components
Control description
Defined Approach Requirements:
Strong cryptography is used to render all authentication factors unreadable during transmission and storage on all system components.
Defined Approach Testing Procedures:
8.3.2.a Examine vendor documentation and system configuration settings to verify that authentication factors are rendered unreadable with strong cryptography during transmission and storage.
8.3.2.b Examine repositories of authentication factors to verify that they are unreadable during storage.
8.3.2.c Examine data transmissions to verify that authentication factors are unreadable during transmission.