8.5.6 Verify that any accounts used by vendors to support and maintain system components are inactive, enabled only when needed by the vendor, and monitored while being used
[PCI DSS 1.x] 8.5.6 Enable accounts used by vendors for remote maintenance only during the time period needed
[READ-ONLY] Archives
[RETIRED] PCI DSS v.1.x Questions and Answers
Implement Strong Access Control Measures