PCI Requirement 9.1.1 – Use Either Video Cameras or Access Control Mechanisms to Monitor Individual Physical Access to Sensitive Areas

by Randy Bartels / December 20, 2022

 Monitoring Physical Access to Sensitive Areas In areas that are considered sensitive, your organization must implement a method for identifying and monitoring who has come into your facility. PCI Requirement 9.1.1 states, “Use either video cameras or access control mechanisms (or both) to monitor individual physical access to sensitive areas. Review collected data and correlate with other entries. Store for at least three months, unless otherwise restricted by law.”…

PCI Requirement 9.1 – Use Appropriate Facility Entry Controls to Limit and Monitor Physical Access to CDE

by Randy Bartels / May 31, 2023

Limit and Monitor Physical Access Applying the appropriate physical security and facility entry controls are vital to complying with PCI Requirement 9.1, which states, “Use appropriate facility entry controls to limit and monitor physical access to systems in the cardholder data environment.” Wherever your cardholder data lives, it must be protected. Complying with PCI Requirement 9.1 comes in two parts: limit and monitor. Your organization must limit physical access to…

PCI Requirement 9 – Restrict Physical Access to Cardholder Data

by Randy Bartels / May 31, 2023

Why Should I Restrict Physical Access to Cardholder Data? What would happen if your organization had no physical access controls protecting cardholder data? Made no effort to restrict physical access to cardholder data? No locks on the doors, no badge or identification system, no security guards, no receptionist? Without physical access controls, you give unauthorized persons a plethora of ways to potentially gain access to your facility and to steal, disable,…

Data Privacy Day 2018

by Sarah Harvey / December 20, 2022

Are You Doing Enough to Protect Customer Data? In a highly data-driven world, protecting the privacy of customer data is more important than ever. January 28th, a day dedicated as Data Privacy Day, is an international holiday meant to help raise awareness about data privacy best practices. Encouraging companies and individuals to value privacy will help to create a culture of privacy and embolden everyone to properly safeguard data and…

GDPR Readiness: What, Why, and Who

by Sarah Harvey / July 12, 2023

What is GDPR? The European Union’s General Data Protection Regulation (GDPR) is not just one of many other data protection frameworks or requirements. GDPR is the top regulatory focus of 2018, even among US companies, and is considered to be one of the most significant information security and privacy laws of our time. The applicability of the law follows the data, rather than following a person or location. The scope…