[Autogenerated] these name of Requirement 9.2 is to make it easy for
people to tell the difference between on site personnel and visitors on
Remember on site personnel covers employees,
contractors and consultants.
So the requirement wants it to be simple to see when unauthorized
visitor is in the cardholder data environments.
Now the exact requirement is that you need to develop procedures.
To be able to distinguish between visitors on on site personnel on this
typically means giving a visitors a badge that identifies them
differently to how on site personal identified.
In fact,
we're going to meet visitor badges to quite a
ridiculous degree in requirement 9.4.
Now there are many ways to meet Requirement 9.2.
For example,
if on all on site personnel wore a uniformed then that visitors will
be eased to identify Que SE is going to look at.
The process is used to give physical credentials to visitors.
They're going to observe on site personal visits in the environment and go Oh,
can I spot the difference on Remember que se themselves is typically
going to be a visitor so they'll pay close attention to processes as they
experienced them when they come to visit you.
So it's wise to brief URL reception staff before your annual assessment starts.