PCI Compliance

Chapter 16

Requirement 9

Restrict Physical Access to Cardholder Data

In a world that is grappling with application, network, and host security, physical security is an essential requirement for every enterprise information security program. Requirement 9 of the PCI-DSS deals with physical security and media management. The requirement details specific aspects of physical security, including access-control systems, cameras, monitoring, and visitor management, among other requirements. Additionally, Requirement 9 addresses the essential issue of management of physical media in the organization, including hard drives, backup disks, tapes, and so on. The requirement addresses specific physical security requirements for media. The requirement also ...