Implement Strong Access Control Measures (Requirem

Topic	Views	Activity
[PCI DSS 3.0] 8.6 Where other authentication mechanisms are used requirement-8:-ident	2562	September 23, 2014
[PCI DSS 3.0] 8.5.1 Additional requirement for service providers: Service providers with remote access to customer requirement-8:-ident	2255	September 23, 2014
[PCI DSS 3.0] 8.5 Do not use group, shared, or generic IDs, passwords, or other authentication methods as follows: requirement-8:-ident	3000	September 23, 2014
[PCI DSS 3.0] 8.4 Document and communicate authentication procedures and policies to all users including: requirement-8:-ident	2381	September 23, 2014
[PCI DSS 3.0] 8.3 Incorporate two-factor authentication for remote network access originating from outside the net requirement-8:-ident	1813	September 23, 2014
[PCI DSS 3.0] 8.2.6 Set passwords/phrases for first- time use and upon reset to a unique value for each user, and requirement-8:-ident	2434	September 23, 2014
[PCI DSS 3.0] 8.2.5 Do not allow an individual to submit a new password/phrase that is the same as any of the last requirement-8:-ident	2821	September 23, 2014
[PCI DSS 3.0] 8.2.4 Change user passwords/passphrases at least every 90 days. requirement-8:-ident	2802	September 23, 2014
[PCI DSS 3.0] 8.2.3 Passwords/phrases must meet the following: requirement-8:-ident	2581	September 23, 2014
[PCI DSS 3.0] 8.2.2 Verify user identity before modifying any authentication credential—for example, performing pa requirement-8:-ident	2544	September 23, 2014
[PCI DSS 3.0] 8.2.1 Using strong cryptography, render all authentication credentials (such as passwords/phrases) u requirement-8:-ident	4126	September 23, 2014
[PCI DSS 3.0] 8.2 In addition to assigning a unique ID, ensure proper user-authentication management for non-consu requirement-8:-ident	1665	September 23, 2014
[PCI DSS 3.0] 8.1.8 If a session has been idle for more than 15 minutes, require the user to re-authenticate to re requirement-8:-ident	3660	September 23, 2014
[PCI DSS 3.0] 8.1.7 Set the lockout duration to a minimum of 30 minutes or until an administrator enables the user requirement-8:-ident	2585	September 23, 2014
[PCI DSS 3.0] 8.1.6 Limit repeated access attempts by locking out the user ID after not more than six attempts. requirement-8:-ident	3319	September 23, 2014
[PCI DSS 3.0] 8.1.5 Manage IDs used by vendors to access, support, or maintain system components via remote access requirement-8:-ident	2852	September 23, 2014
[PCI DSS 3.0] 8.1.4 Remove/disable inactive user accounts at least every 90 days. requirement-8:-ident	4242	September 23, 2014
[PCI DSS 3.0] 8.1.3 Immediately revoke access for any terminated users. requirement-8:-ident	2894	September 23, 2014
[PCI DSS 3.0] 8.1.2 Control addition, deletion, and modification of user IDs, credentials, and other identifier ob requirement-8:-ident	5328	September 23, 2014
[PCI DSS 3.0] 8.1.1 Assign all users a unique ID before allowing them to access system components or cardholder da requirement-8:-ident	2445	September 23, 2014
[PCI DSS 3.0] 8.1 Define and implement policies and procedures to ensure proper user identification management for requirement-8:-ident	1672	September 23, 2014
[PCI DSS 3.0] 7.3 Ensure that security policies and operational procedures for restricting access to cardholder da requirement-7:-restr	12603	September 23, 2014
[PCI DSS 3.0] 7.2.3 Default “deny-all” setting. requirement-7:-restr	13745	September 23, 2014
[PCI DSS 3.0] 7.2.2 Assignment of privileges to individuals based on job classification and function. requirement-7:-restr	12091	September 23, 2014
[PCI DSS 3.0] 7.2.1 Coverage of all system components requirement-7:-restr	12970	September 23, 2014
[PCI DSS 3.0] 7.2 Establish an access control system for systems components that restricts access based on a user’ requirement-7:-restr	11964	September 23, 2014
[PCI DSS 3.0] 7.1.4 Require documented approval by authorized parties specifying required privileges. requirement-7:-restr	13026	September 23, 2014
[PCI DSS 3.0] 7.1.3 Assign access based on individual personnel’s job classification and function. requirement-7:-restr	12521	September 23, 2014
[PCI DSS 3.0] 7.1.2 Restrict access to privileged user IDs to least privileges necessary to perform job responsibi requirement-7:-restr	12600	September 23, 2014
[PCI DSS 3.0] 7.1.1 Define access needs for each role, including: requirement-7:-restr	12848	September 23, 2014