Identify the document describing the authentication method(s) used, and confirm that the methods require users to be authenticated using a unique ID and additional authentication for access to the cardholder data environment.
Describe the authentication methods used (for example, a password or passphrase, a token device or smart card, a biometric, etc.), for each type of system component.
For each type of authentication method used and for each type of system component:
i. Describe how the authentication method was observed to be used for access to the cardholder data environment.
ii. Describe how the authentication method was observed to be functioning consistent with the documented authentication method(s).