The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

A. B. Cooper Jr. et al.The Definitive Guide to PCI DSS Version 4https://doi.org/10.1007/978-1-4842-9288-4_9

9. Identify Users and Authenticate Access to System Components

Arthur B. Cooper Jr.¹  , Jeff Hall², David Mundhenk³ and Ben Rothke⁴

(1)

Colorado Springs, CO, USA

(2)

Minneapolis, MN, USA

(3)

Austin, TX, USA

(4)

Clifton, NJ, USA

 

Overview

Requirement 8 follows Requirement 7 in order and also in relation to keeping bad guys out of your payment environment. Requirement 7 mandates that we have a solid access control model and we have systems in place to perform access control on all components. Requirement 8 is basically the “Operations Manual” for the model and ...