💼 3.4.1 If disk encryption is used, logical access must be managed separately and independently of native operating system authentication and access control mechanisms.
-
Contextual name: 💼 3.4.1 If disk encryption is used, logical access must be managed separately and independently of native operating system authentication and access control mechanisms.
-
ID:
/frameworks/pci-dss-v3.2.1/03/04/01 -
Located in: 💼 3.4 Render PAN unreadable anywhere it is stored.
Description
Decryption keys must not be associated with user accounts.
This requirement applies in addition to all other PCI DSS encryption and key-management requirements.
Similar
- Sections
/frameworks/pci-dss-v4.0/03/05/01/03
- Internal
- ID:
dec-c-fe88d76c
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable. | 7 |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable. | 7 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (7)
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-0bdcd276 | 1 | |
| ✉️ dec-x-5c3c2067 | 1 | |
| ✉️ dec-x-6ba5ecd2 | 1 | |
| ✉️ dec-x-9cdb7407 | 1 | |
| ✉️ dec-x-966d3183 | 1 | |
| ✉️ dec-x-aef11ebd | 1 | |
| ✉️ dec-x-f63fd4f0 | 1 |