PCI DSS for Remote and Work-from-Home Agents

Preferred architecture

• VDI / DaaS with no local CHD storage
• Controlled telephony / softphone paths
• Screen watermarking and session recording where allowed

Policy

Prohibit photography of screens, shared household logins, and unapproved Wi-Fi without additional controls.

Assessment

Expect QSAs to sample remote agent builds and network paths.

How CyberSilo Helps

• Evidence mapping in CyberSilo CSA
• Detection and logging proof with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Is WFH banned by PCI?

Not blanket — but controls must keep CHD protected.

BYOD OK?

Only with strong containerisation/VDI; often discouraged for payment entry.

Call centre link?

See the call centre guide for DTMF/recording patterns.

Related Resources

• Call centres
• PCI hub