top of page
< Back

9.9.1 PCI DSS (v3.2.1)

Compliance Standard

Compliance Version

Control ID




Requirement 9: Restrict physical access to cardholder data


Maintain an up-to-date list of devices. The list should include the following:
• Make, model of device
• Location of device (for example, the address of the site or facility where the device is located)
• Device serial number or other method of unique identification.

bottom of page