PCI DSS Requirement 8

Strong protection is necessary to protect against unauthorized access to your systems and data. PCI DSS Requirement 8 contains many elements that you need to address for employees and third parties alike in your access control and password policies.

Passwords are important for computer protection and payment data. But they need to be robust and updated frequently to be efficient.

Multi-factor Authentication (MFA) is intended to provide a higher level of security authentication for users attempting to access a resource, such as physical location, mobile device, network, or database.

Assigning each person with access to a unique identity (ID) ensures that each individual has specific accountability for their actions. When such accountability is in place, critical data and system activities are carried out by established and approved users and procedures and can be tracked accordingly.