PCI SSCPCI DSSSecurity PolicyEASYFree question
What is an acceptable use policy in PCI DSS?
- A.A policy listing the approved software for payment applications, including version numbers, support contracts, and renewal dates held by procurement
- B.A policy setting the acceptable range of card transaction values, including daily limits, refund ceilings, and manual override approvals for supervisors
- C.A policy setting the permitted hours for staff to access systems, including shift patterns and overtime
- D.A policy defining acceptable use of technology including internet, email, and system access aligned with security requirements
Why D is correct
An acceptable use policy defines how employees may use organizational technology resources, ensuring usage aligns with security requirements for protecting cardholder data.
Know someone studying for PCI DSS? Send them this one.