Discussions
PCI Compliance (2 factor Authentication)
Hi all,
How is everyone else dealing with PCI DSS compliance?
Whilst completing the online PCI Questionnaire it states
"Is two-factor authentication incorporated for remote access (network-level access originating from outside the network) to the network by employees, administrators, and third parties?"
"two-factor authentication is required for any remote access to networks with access to the cardholder data environment, and is recommended for all remote access to the entity's networks."
Netsuite do supply a two factor authentication solution but our account manager hasn't a clue about it.
http://www.netsuite.com/portal/pdf/ds-netsuite-two-factor-authentication.pdf
I'd be interested to hear everyone else's thoughts/solutions.