[Autogenerated] 8.7 is one that always clients get quite confused about.
It is about access to databases.
Yes.
And that you're not allowed to have effectively network level
jQuery AD CS direct query access to the database.
Right.
Eso the deal is And let's because this is about
database is with cardholder data.
So not any database in the cardholder.
Correct?
Correct.
So if there's a database that's just managing
configurations or something like that, 8.7 doesn't apply to that,
right?
8.7 applies to a database containing cardholder data,
and the goal is the database.
Add Mons should be able to sort of connect directly to
the database and and make you know, unstructured queries.
Right, Because they're the database, Edmonds.
But other users should go through some sort of application, right?
Right.
Should go through some sort of interface that,
you know, restricts what they could do, right?
Right.
Because you don't want them making whatever queries to the database.
So they couldn't just log in and do a select statement, right?
Yeah.
Dump out a table and walk away with it.
What about giving her accounts to just let them execute stored procedures?
Um not because that's that's an argument to be made to make.
You know, I I think I think you could conceivably evaluate that on its merits.
What are those stored procedures?
What do they do?
Uh, and then how do you make sure that they can only execute those right?
And, you know, if you're sort of sufficiently restrictive,
then then URL east meeting the intent of the requirement There.
Is this a problem?
Because this used to be a problem.
I know that seems to be quite a big problem in assessment.
Is it still a problem,
or is it Sort of tends to go away as people got more mature,
I think.
I think, uh, you know, it splits into sort of two camps, right?
Where for many organizations, they've sort of figured this out.
They have limited the number of people who can directly access the database.
It all goes through an application.
Anyhow, um, this is good for for, you know,
like, particularly sort of tech savvy or fast moving,
you know, companies that are that error using,
uh, you know, cloud infrastructure or suffer defined infrastructure.
Um,
and then if you've got sort of legacy organizations with a lot of big kind of,
you know, commercial database products operating there,
database infrastructure.
This is harder to sort of move on.