Compliancemanzill.com
PCI DSS v4.0

PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/143 of 250

9.2.2Physical access controls manage entry into facilities and systems containing cardholder data

Control family: Requirement 09: Restrict Physical Access to Cardholder Data

Control description

Defined Approach Requirements:

Physical and/or logical controls are implemented to restrict use of publicly accessible network jacks within the facility.

Defined Approach Testing Procedures:

9.2.2 Interview responsible personnel and observe locations of publicly accessible network jacks to verify that physical and/or logical controls are in place to restrict access to publicly accessible network jacks within the facility.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.