PCI DSS v4.0/Requirement 08: Identify Users and Authenticate Access to System Components/133 of 250
8.4.2Multi-factor authentication (MFA) is implemented to secure access into the CDE
Control family: Requirement 08: Identify Users and Authenticate Access to System Components
Control description
Defined Approach Requirements:
MFA is implemented for all access into the CDE.
Defined Approach Testing Procedures:
8.4.2.a Examine network and/or system configurations to verify MFA is implemented for all access into the CDE.
8.4.2.b Observe personnel logging in to the CDE and examine evidence to verify that MFA is required.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.