PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/143 of 250
9.2.2Physical access controls manage entry into facilities and systems containing cardholder data
Control family: Requirement 09: Restrict Physical Access to Cardholder Data
Control description
Defined Approach Requirements:
Physical and/or logical controls are implemented to restrict use of publicly accessible network jacks within the facility.
Defined Approach Testing Procedures:
9.2.2 Interview responsible personnel and observe locations of publicly accessible network jacks to verify that physical and/or logical controls are in place to restrict access to publicly accessible network jacks within the facility.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.