PCI DSS Requirement 9.3 specifies that visitors must be escorted at all times in areas where cardholder data is present to prevent unauthorized access or breaches.
Invalid Options:
B:Visitor badges must be distinguishable from employee badges.
C:Visitor logs are necessary but do not need detailed personal information like addresses.
D:Retaining visitor identification for 30 days is not a requirement.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit