What does CDE stand for in PCI DSS?
- A.Cardholder Data Environment-the people, processes, and technology that store, process, or transmit cardholder data or sensitive authentication data
- B.Card Data Exchange, the network zone where acquirers, issuers, and processors route authorization messages and settlement files
- C.Controlled Data Enclave, the hardened segment that holds the HSMs, key custodian workstations, and encryption key stores
- D.Certified Deployment Environment, the QSA-approved build pipeline, staging servers, and release systems for payment software
Why A is correct
CDE stands for Cardholder Data Environment, encompassing all system components, people, and processes involved in storing, processing, or transmitting cardholder data and sensitive authentication data.
Know someone studying for PCI DSS? Send them this one.