πΌ 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable.
-
Contextual name: πΌ 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable.
-
ID:
/frameworks/pci-dss-v4.0.1/03/05/01/03
-
Located in: πΌ 3.5.1 PAN is rendered unreadable anywhere it is stored.
Descriptionβ
It is managed as follows:
- Logical access is managed separately and independently of native operating system authentication and access control mechanisms.
- Decryption keys are not associated with user accounts.
- Authentication factors (passwords, passphrases, or cryptographic keys) that allow access to unencrypted data are stored securely.
Similarβ
- Sections
/frameworks/pci-dss-v4.0/03/05/01/03
Similar Sections (Take Policies From)β
Section | Sub Sections | Internal Rules | Policies | Flags |
---|---|---|---|---|
πΌ PCI DSS v4.0 β πΌ 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable. | 7 |
Similar Sections (Give Policies To)β
Section | Sub Sections | Internal Rules | Policies | Flags |
---|---|---|---|---|
πΌ PCI DSS v4.0 β πΌ 3.5.1.3 If disk-level or partition-level encryption is used (rather than file-, column-, or field--level database encryption) to render PAN unreadable. | 7 |
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|
Policies (7)β
Policy | Logic Count | Flags |
---|---|---|
π AWS Account EBS Volume Encryption Attribute is not enabled in all regions π’ | 1 | π’ x6 |
π AWS EFS File System encryption is not enabled π’ | 1 | π’ x6 |
π AWS RDS Instance Encryption is not enabled π’ | 1 | π’ x6 |
π Azure Diagnostic Setting Logs export to Storage Account not encrypted with Customer-managed key π’ | 1 | π’ x6 |
π Azure Storage Account With Critical Data is not encrypted with customer managed key π’ | π’ x3 | |
π Azure Virtual Machine OS and Data disks are not encrypted with Customer-managed key π’ | 1 | π’ x6 |
π Unattached Azure Managed Disk is not encrypted with Customer-managed key π’ | 1 | π’ x6 |