PCI SSCPCI DSSSecurity PolicyEASYFree question
What operational security procedures does PCI DSS require?
- A.Written procedures must exist for the payment application only, with annual reviews by the QSA, signed off by the acquirer
- B.Procedures must be kept for all firewalls, with the other controls covered by the policy text, reviewed by the acquirer each year
- C.Operational procedures need to exist for each requirement, with the QSA approving all procedures, a step the standard sets before the assessment
- D.Documented operational procedures must exist for all PCI DSS requirements, aligned with the security policy
Why D is correct
PCI DSS requires documented operational procedures for implementing each requirement, ensuring consistent daily security practices.
Know someone studying for PCI DSS? Send them this one.