Educause Security Discussion mailing list archives

PCI v2.0 Requirement 8.3


From: Daniel Bennett <dbennett () PCT EDU>
Date: Mon, 17 Jan 2011 20:30:35 +0000

We are currently working on PCI v2.0 compliance and we hit requirement 8.3.  We are very interested in how other 
institutions have solved this requirement.  Please respond on or off list.  Below is the requirement:

8.3 Incorporate two-factor authentication
for remote access (network-level access
originating from outside the network) to
the network by employees,
administrators, and third parties. (For
example, remote authentication and dialin
service (RADIUS) with tokens; terminal
access controller access control system
(TACACS) with tokens; or other
technologies that facilitate two-factor
authentication.)

Thanks,

Dan


Current thread: