Compliancemanzill.com
PCI DSS v4.0

PCI DSS v4.0/Requirement 09: Restrict Physical Access to Cardholder Data/156 of 250

9.4.5Media with cardholder data is securely stored, accessed, distributed, and destroyed

Control family: Requirement 09: Restrict Physical Access to Cardholder Data

Control description

Defined Approach Requirements:

Inventory logs of all electronic media with cardholder data are maintained.

Defined Approach Testing Procedures:

9.4.5.a Examine documentation to verify that procedures are defined to maintain electronic media inventory logs.

9.4.5.b Examine electronic media inventory logs and interview responsible personnel to verify that logs are maintained.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.