The PCI Council explains, ‘the term “two-factor” was replaced with the term “multi-factor” in several requirements in PCI DSS v3.2 (Requirements 8.3, 8.3.1, 8.3.2, and 8.5.1). The intent of this change was to use more consistent terminology that accurately represents the meaning of the term. This is simply a change in naming convention and does not alter its definition, which is that at least two authentication factors are used in the authentication process.’
Note: This requirement is a best practice until January 31, 2018, after which it becomes a requirement.
Do you need help with implementing safe practices for securing access to your network environment? Or follow policies as recommended by the payment card industry standards? Get in touch with Omega.