8.2 In addition to assigning a unique ID, employ at least one of the following methods to authenticate all users: * Password * Token devices (for example, SecureID, certificates, or public key) * Biometrics

[admin]

8.2 To verify that users are authenticated using unique ID and additional authentication (for example, a password) for access to the cardholder environment, perform the following:
* Obtain and examine documentation describing the authentication method(s) used
* For each type of authentication method used and for each type of system component, observe an authentication to verify authentication is functioning consistent with documented authentication method(s)