What must be included in an organization's procedures for managing visitors?

​ Visitor Management Requirements:

PCI DSS Requirement 9.3 specifies that visitors must be escorted at all times in areas where

cardholder data is present to prevent unauthorized access or breaches​​.

​ Invalid Options:

B: Visitor badges must be distinguishable from employee badges.

C: Visitor logs are necessary but do not need detailed personal information like addresses.

D: Retaining visitor identification for 30 days is not a requirement.