Skip to main content

💼 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.

Description​

Including:

  • Identifying personnel.
  • Managing changes to an individual's physical access requirements.
  • Revoking or terminating personnel identification.
  • Limiting access to the identification process or system to authorized personnel.

Similar​

  • Sections
    • /frameworks/pci-dss-v3.2.1/09/02
    • /frameworks/pci-dss-v4.0.1/09/03/01
  • Internal
    • ID: dec-c-b61b093b

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v3.2.1 → 💼 9.2 Develop procedures to easily distinguish between onsite personnel and visitors.
💼 PCI DSS v4.0.1 → 💼 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v3.2.1 → 💼 9.2 Develop procedures to easily distinguish between onsite personnel and visitors.
💼 PCI DSS v4.0.1 → 💼 9.3.1 Procedures are implemented for authorizing and managing physical access of personnel to the CDE.1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 9.3.1.1 Physical access to sensitive areas within the CDE for personnel is controlled.