Examkin

Question

Difficulty: EasyData Privacy and Compliance Regulations

A helpdesk technician is configuring a workstation for an employee in the billing department of a retail company. The workstation will be used to process customer credit card payments and handle primary account numbers (PAN). Which of the following regulatory or industry standards specifically governs the security requirements for protecting this credit card data?

  1. PCI-DSSAnswer
  2. B
    HIPAA
  3. C
    FERPA
  4. D
    GDPR

Answer

PCI-DSS is the compliance standard that specifically governs technical and operational requirements for protecting credit card data.
The Payment Card Industry Data Security Standard (PCI-DSS) is an industry security standard designed to ensure that all businesses accepting, processing, storing, or transmitting credit card information maintain a secure environment.

Step-by-Step Solution

1
Identify the category of data described in the workstation scenario.
The technician is configuring a system to process customer credit card payments and store card numbers.
Determining the data type is the first step in identifying the applicable compliance scope.
2
Match payment card data to the corresponding regulatory or industry framework.
Credit card data protection falls under PCI-DSS.
PCI-DSS dictates specific security controls for merchants processing and storing cardholder data.

Key Concept

PCI-DSS Scope and Application
Rate this question

Topics

Data Privacy and Compliance Regulations

More questions from this topic