Which of the following describes the purpose of assigning a unique ID to each person with computer access in PCI compliance?

• A. It helps in auditing user activity and enforcing accountability.
• B. It provides automatic software updates.
• C. It reduces hardware costs.
• D. It helps in implementing strong access control measures.

Answer: (D)

Having a unique ID for each person is what makes access control enforceable. When every user has their own identity, you can assign permissions that match their role and the minimum level of access they need. This prevents sharing credentials, ensures that only authorized individuals can reach systems handling cardholder data, and makes it possible to revoke access promptly when someone changes roles or leaves. In PCI compliance, this per-user identity is the foundation of strong access control—you can verify who is requesting access, enforce what they can do, and control access to sensitive resources. While activity can later be audited and traced back to that individual, the core purpose of unique IDs is to implement and enforce proper access control.