Here we look at FAQ article 1449 on whether two-step authentication is acceptable for meeting PCI DSS Requirement 8.3.