PCI SSCPCI DSSSecurity PolicyEASYFree question
What topics must security awareness training cover?
- A.The history of card brand fines, the structure of the acquirer's pricing tiers, and each vendor's contract renewal dates for the payment gateway
- B.Network diagram conventions, firewall rule syntax, and the backup rotation schedule used by the operations team
- C.Server hardening steps, patch deadlines, and the acquirer's escalation contacts for chargebacks
- D.The importance of cardholder data security, acceptable use policies, and each employee's security responsibilities
Why D is correct
Training must cover cardholder data security importance, acceptable use, individual security responsibilities, and threats relevant to the employee's role.
Know someone studying for PCI DSS? Send them this one.