Requirement 8 - Identify Users and Authenticate Access to System Components

Requirement 8 of PCI DSS v4.0 mandates that entities uniquely identify each individual who accesses cardholder data environments and enforce strong authentication methods for all system components, ensuring that only authorized users can log in, and that credentials are protected, rotated, and revoked promptly when access is no longer needed.