1.3 - Network Access to Cardholder Data Environment Restricted

Requirement 1.3 of PCI DSS v4.0 mandates that access to the cardholder data environment be limited to only authorized individuals and system components, using network segmentation, firewalls, and access-control mechanisms to enforce least-privilege principles and prevent unrestricted connectivity.