What are potential consequences of failing to achieve PCI DSS compliance?
- A.Fines from card brands, increased processing fees, mandatory forensic investigation after breach, and potential loss of card processing ability
- B.No consequences, because an attestation of compliance may be signed by the assessor rather than by the entity for third-party service providers
- C.Only a warning, as a report on compliance remains valid until the entity changes its payment technology for entities using the defined approach
- D.Only required to improve next year, a flexibility v4.0 introduced for any entity adopting the customized approach, which replaces the requirement's stated objective with one the entity defines for itself
Why A is correct
Non-compliance can result in significant fines, increased transaction fees, mandatory forensic investigations, liability for fraud losses, and potential loss of card processing privileges.
Know someone studying for PCI DSS? Send them this one.