Compliancemanzill.com
PCI DSS v4.0

PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/144 of 250

9.2.3Physical access controls manage entry into facilities and systems containing cardholder data

Control family: Requirement 09: Restrict Physical Access to Cardholder Data

Control description

Defined Approach Requirements:

Physical access to wireless access points, gateways, networking/communications hardware, and telecommunication lines within the facility is restricted.

Defined Approach Testing Procedures:

9.2.3 Interview responsible personnel and observe locations of hardware and lines to verify that physical access to wireless access points, gateways networking/communications hardware, and telecommunication lines within the facility is Customized Approach Objective restricted.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.