The problem is you need to be able to convince the auditor that your controls meet the requirement. That's a much easier discussion to have with robust logical

The problem is you need to be able to convince the auditor that your controls meet the requirement. That's a much easier discussion to have with robust logical or physical separation.