ℹ️
Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.
FAQ #1067 Deleted

What is meant by ?non-consumer users? in PCI DSS Requirement 8?

PCI DSS Requirement 8 addresses secure authentication requirements and requires that all passwords and other authentication credentials be securely managed. These requirements apply to all non-consumer users and administrators. The term ?non-consumer user? refers to all individuals, excluding cardholders, who access system components, including employees, administrators, and third parties.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.