PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/144 of 250
9.2.3Physical access controls manage entry into facilities and systems containing cardholder data
Control family: Requirement 09: Restrict Physical Access to Cardholder Data
Control description
Defined Approach Requirements:
Physical access to wireless access points, gateways, networking/communications hardware, and telecommunication lines within the facility is restricted.
Defined Approach Testing Procedures:
9.2.3 Interview responsible personnel and observe locations of hardware and lines to verify that physical access to wireless access points, gateways networking/communications hardware, and telecommunication lines within the facility is Customized Approach Objective restricted.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.