8.1 Define and implement policies and procedures to ensure proper user identification management for non- consumer users and administrators on all system components as follows:
8.1.a Review procedures and confirm they define processes for each of the items below at 8.1.1 through 8.1.8
8.1.b Verify that procedures are implemented for user identification management, by performing the following:
By ensuring each user is uniquely identified— instead of using one ID for several employees—an organization can maintain individual responsibility for actions and an effective audit trail per employee. This will help speed issue resolution and containment when misuse or malicious intent occurs.