PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/141 of 250
9.2.1Physical access controls manage entry into facilities and systems containing cardholder data
Control family: Requirement 09: Restrict Physical Access to Cardholder Data
Control description
Defined Approach Requirements:
Appropriate facility entry controls are in place to restrict physical access to systems in the CDE.
Defined Approach Testing Procedures:
9.2.1 Observe entry controls and interview responsible personnel to verify that physical security controls are in place to restrict access to systems in the CDE
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.