When dealing with compliance with the Payment Card Industry-Data Security Standard (PCI-DSS), an organization that shares card holder information with a service provider MUST do which of the following?

Question

Kefash White · Accepted Answer

Validate the service provider's PCI-DSS compliance status on a regular basis.

Kefash White · Answer

Perform a service provider PCI-DSS assessment on a yearly basis.

Kefash White · Answer

Validate that the service providers security policies are in alignment with those of the organization.

Kefash White · Answer

Ensure that the service provider updates and tests its Disaster Recovery Plan (DRP) on a yearly basis.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 236 - CISSP discussion

Suggested answer: B

0 comments