Requirement # 8 states that organizations must “Identify and authenticate access to system components.” This means that a unique identification (ID) should be assigned to each user before allowing that user to access critical data and that certain policies and controls should be implemented in order to mitigate the risk of unauthorized access.

Netwrix Auditor tracks all changes to user data or system configurations and all file access attempts. It provides easy-to-read reports with comprehensive information about Password and Account Lockout Policy settings, password resets, changes to user IDs and user accounts, inactive user accounts, access to sensitive data, and more. With these reports at hand, you can prove to auditors that your organization adheres to requirement #8 of PCI DSS.