@gaughen I don't know, my guess some would argue they can enforce end-to-end encryption with app protection and access with restirctions to compensate

@gaughen I don't know, my guess some would argue they can enforce end-to-end encryption with app protection and access with restirctions to compensate

PCI DSS v4.0 requires MFA in all the places, I believe, a rather new change not everyone has caught up with.