Does giving access to third party to access the environment where the card holder data are passed against PCI DSS requirement?
The third party will have access only to a particular directory where NO customer data hits or exists.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityDoes giving access to third party to access the environment where the card holder data are passed against PCI DSS requirement?
The third party will have access only to a particular directory where NO customer data hits or exists.
PCI DSS Scope
For PCI compliance you need meet the security requirements for all the Application/DataStorage/Networking that manage the cardholder information or that it's connected to the environment where the cardholder data is stored/managed or proccessed.