[withinboredom]

Yes. But it also isn’t a regulation. It is pretty much whatever you say it is.

[bigfatkitten]

The problem is you need to be able to convince the auditor that your controls meet the requirement. That's a much easier discussion to have with robust logical or physical separation.