8.2.3—Additional requirement for service providers only: Service providers with remote access to customer premises use unique authentication factors for each customer premises.
>Requirement Description
Additional requirement for service providers only: Service providers with remote access to customer premises use unique authentication factors for each customer premises. Applicability Notes This requirement applies only when the entity being assessed is a service provider. This requirement is not intended to apply to service providers accessing their own shared services environments, where multiple customer environments are hosted. If service provider employees use shared authentication factors to remotely access customer premises, these factors must be unique per customer and managed in accordance with Requirement 8.2.2.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.