Why It Matters?
A common target for data breach attackers is database tables with sensitive personal or financial information. In the case of merchants or financial institutions, this could be tables with credit card or card holder information. Once gaining access, would-be ransomware attackers could then encrypt the data, and hold the decryption key in ransom.
What Exactly Does This Policy Do?
This policy ensures that an administrator approves before updates are performed on the cardholder table, avoiding such attacks.