The PCI DSS compliance rules say that if we use any computers to take card payments via a web based virtual terminal, then those PCs must be isolated from the rest of the IT network (otherwise the entire IT network comes under the scope of PCI compliance).
We need multiple people in a call centre to be able to to take customer card payments over the phone using the virtual terminal. The trouble is those people will also need access to the rest of the IT network in order to do the rest of their job functions.
Is there any practical way to implement this? All I can think of is either extending the scope of PCI compliance to the whole network (which I would like to avoid) or providing each person with two PCs - one for the main part of their job and the other for the just for the card payments over the virtual terminal.
Does anyone have any practical experience of implementing this?