PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/150 of 250
9.4.1Media with cardholder data is securely stored, accessed, distributed, and destroyed
Control family: Requirement 09: Restrict Physical Access to Cardholder Data
Control description
Defined Approach Requirements:
All media with cardholder data is physically secured.
Defined Approach Testing Procedures:
9.4.1. Examine documentation to verify that the procedures defined for protecting cardholder data include controls for physically securing all media.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.