[PCI-DSS] Requirement 8: Assign a unique ID to each person with computer access - PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum

		PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum > Payment Card Industry Data Security Standard Frequently Asked Questions (PCI DSS FAQ) > Implement Strong Access Control Measures
[PCI-DSS] Requirement 8: Assign a unique ID to each person with computer access

[PCI-DSS] Requirement 8: Assign a unique ID to each person with computer access Assigning a unique identification (ID) to each person with access ensures that actions taken on critical data and systems are performed by, and can be traced to, known and authorized users.

Page 1 of 2

Threads in Forum : [PCI-DSS] Requirement 8: Assign a unique ID to each person with computer access

Forum Tools

Search this Forum

Rating Thread / Thread Starter	Last Post	Replies	Views
8.1 Identify all users with a unique user name before allowing them to access system components or cardholder data. admin	03-18-2007 03:11 AM by admin	0	1,338
8.2 In addition to assigning a unique ID, employ at least one of the following methods to authenticate all users: * Password * Token devices (for example, SecureID, certificates, or public key) * Biometrics admin	03-18-2007 03:11 AM by admin	0	991
8.3 Implement two-factor authentication for remote access to the network by employees, administrators, and third parties. Use technologies such as remote authentication and dial-in service (RADIUS) or terminal access controller access control system (TACACS) with tokens; or VPN (based on SSL/TLS or IPSEC) with individual certificates. admin	03-18-2007 03:11 AM by admin	0	1,163
8.4 Encrypt all passwords during transmission and storage on all system components. admin	03-18-2007 03:12 AM by admin	0	676
8.5 Ensure proper user authentication and password management for non-consumer users and administrators on all system components as follows: admin	03-18-2007 03:12 AM by admin	0	1,156
8.5.1 Control addition, deletion, and modification of user IDs, credentials, and other identifier objects admin	03-18-2007 03:12 AM by admin	0	621
8.5.10 Require a minimum password length of at least seven characters admin	03-18-2007 03:15 AM by admin	0	649
8.5.11 Use passwords containing both numeric and alphabetic characters admin	03-18-2007 03:16 AM by admin	0	629
8.5.12 Do not allow an individual to submit a new password that is the same as any of the last four passwords he or she has used admin	03-18-2007 03:16 AM by admin	0	607
8.5.13 Limit repeated access attempts by locking out the user ID after not more than six attempts admin	03-18-2007 03:16 AM by admin	0	677
8.5.14 Set the lockout duration to thirty minutes or until administrator enables the user ID admin	03-18-2007 03:17 AM by admin	0	720
8.5.15 If a session has been idle for more than 15 minutes, require the user to re-enter the password to re-activate the terminal admin	03-18-2007 03:17 AM by admin	0	811
8.5.16 Authenticate all access to any database containing cardholder data. This includes access by applications, administrators, and all other users admin	03-18-2007 03:17 AM by admin	0	1,098
8.5.2 Verify user identity before performing password resets admin	03-18-2007 03:13 AM by admin	0	692
8.5.3 Set first-time passwords to a unique value for each user and change immediately after the first use admin	03-18-2007 03:13 AM by admin	0	605
8.5.4 Immediately revoke access for any terminated users admin	03-18-2007 03:13 AM by admin	0	586
8.5.5 Remove inactive user accounts at least every 90 days admin	03-18-2007 03:14 AM by admin	0	620
8.5.6 Enable accounts used by vendors for remote maintenance only during the time period needed admin	03-18-2007 03:14 AM by admin	0	639
8.5.7 Communicate password procedures and policies to all users who have access to cardholder data admin	03-18-2007 03:14 AM by admin	0	679
8.5.8 Do not use group, shared, or generic accounts and passwords admin	02-12-2008 10:50 AM by dwfox64	1	1,566

Page 1 of 2

Forum Tools	Search this Forum
Mark This Forum Read View Parent Forum	Search this Forum : Advanced Search

	New posts		Hot thread with new posts
	No new posts		Hot thread with no new posts
	Thread is closed

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

All times are GMT -4. The time now is 07:00 PM.