What are potential consequences of failing to achieve PCI DSS compliance?
- A.Fines from card brands, increased processing fees, mandatory forensic investigation after breach, and potential loss of card processing ability
- B.Criminal charges against the QSA, increased interchange rates, mandatory re-issuance of cards after breach, and potential loss of the merchant's PCI SSC membership
- C.Fines from the PCI SSC, higher ASV scan prices, mandatory SAQ resubmission, and loss of the merchant's QSA
- D.Loss of the merchant's ISA certification, reduced chargebacks, mandatory retraining, and a public listing by the council
Why A is correct
Non-compliance can result in significant fines, increased transaction fees, mandatory forensic investigations, liability for fraud losses, and potential loss of card processing privileges.
Know someone studying for PCI DSS? Send them this one.