[Autogenerated] So in this course,
we looked at managing logical access to cardholder data on
physical access to cardholder data requirements.
Seven.
Requirement eight on requirement nine.
The most important thing here really is to look at that access control.
The logical access control is where bad guys break in.
The breaking is administrators, and they take cardholder data.
And so so getting that right, getting good starters, movers, levers.
And as you heard Jacob,
talk about making sure that you have a limited number of
administrators and you know who is gaining access to that
environments really important in physical security.
You know, I think the message really clear is is work with your QoS A.
Uh, if you're having,
if you're if you feel that what you're being asked to do is unreasonable,
but start challenge that look at where the risk is in requirement.
Nine.
Because I I love that story that Jacob told,
because you, if you don't have backup tapes,
you don't have to create backup tapes to fulfill the requirement.
The requirements not applicable and also this is with one area where
there's another law in terms off CCTV retention in different countries
where there's that column that says we can't keep it for three months or we
can't keep it for a certain period of time.
We do what we do.
Eso again.
That's a matter of making sure the QoS is aware of that.
Most QoS.
I don't have to take that box very frequently.
And so if you got a local law or even,
you know local agreements that say you can't do that,
then point that out to the QoS nested.
So that's restricting access to cardholder data.