FAQ #1093 Diff
Does Requirement 3.4 apply to mainframes?
Earlier Version
Later Version
Removed
Added
Yes. PCI DSS Requirement 3.4 of the PCI DSS5.1 applies to mainframes that store cardholder data. If thea company has legitimate business or technical constraints to meetin meeting this or any other requirement, compensating controls may be appliedconsidered. Compensating controls must be commensurate with additional risk imposed by not adhering toaddress the additional risk introduced by not meeting the original requirement.
Please referRefer to Appendices B and C of the PCI DSS v4.0.1 for more information on the use ofabout compensating controls.
Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.