[PCI DSS Requirements] Restrict access to cardholder data by business need to know Assign a unique ID to each person with computer access Restrict physical access to cardholder data [Goals] 
Implement Strong Access Control Measures