Search code examples
administrationpci-dsspci-compliance

PCI compliance and local admin rights

Does PCI DSS compliance forbids developers to have local admin rights on their PC?

Solution

  • I can't see how it possibly can - unless doing that introduce a risk to the data in your organization (which it might). I guess the answer is 'Sometimes'.

    This is just my opinion - I'm not certified in any way

    You'll find most workplaces lock down admin rights anyway - it's fairly standard.

    One of the main objectives of PCI DSS...

    Build and Maintain a Secure Network

    Will in the majority of cases include locking down individual machines to prevent admin access, though this doesn't in of itself make your network secure (neither does the inverse preclude this).