Skip to main content

πŸ’Ό 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.

Description​

Including:

  • Identifying personnel.
  • Managing changes to an individual's physical access requirements.
  • Revoking or terminating personnel identification.
  • Limiting access to the identification process or system to authorized personnel.

Similar​

  • Sections
    • /frameworks/pci-dss-v3.2.1/09/02
    • /frameworks/pci-dss-v4.0.1/09/03/01

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό PCI DSS v3.2.1 β†’ πŸ’Ό 9.2 Develop procedures to easily distinguish between onsite personnel and visitors.
πŸ’Ό PCI DSS v4.0.1 β†’ πŸ’Ό 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό PCI DSS v3.2.1 β†’ πŸ’Ό 9.2 Develop procedures to easily distinguish between onsite personnel and visitors.
πŸ’Ό PCI DSS v4.0.1 β†’ πŸ’Ό 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό 9.3.1.1 Physical access to sensitive areas within the CDE for personnel is controlled.