PCIDSS

What does PCIDSS stand for?

• Payment Credit Industry Data Security Standards

• Payment Card Industry Data Scrutiny Standards

• Payment Card Industry Data Security Standards

• Protective Credit Industry Digital Security Standards

What is the purpose of the PCI DSS standards?

• To eliminate the use of credit cards.

• To protect consumer data alone.

• To get all business to pay security dues.

• To protect consumers and businesses from fraudulent use of credit card data.

Who do PCI DSS requirements apply to?

• Retailers that use credit card terminals

• Only the major credit card companies

• Any business that processes credit card payments

• Online retailers.

Thieves can access and steal data from

• Paper stored in filing cabinets

• Data in a payment system database

• Compromised card readers

• All answers listed

The best step that you can take to protecting cardholder data is to

• Only accept payments with EMV chip cards

• Not store any cardholder data

• Not allow any mobile payments whatsoever

Your PCI risk only needs to be assessed when your first start accepting card payments.

• True

• False

What must you provide after your PCI risks have been identified?

• Proof of a compliant risk assessment only

• Proof that risks were remediated only '

• Proof that risks were remediated, mitigated and proof of a risk assessment

Who is ultimately responsible for paying PCI fines?

• The merchant

• The managed service provider

• The bank

If a merchant is found not to be PCI compliant and fined as a result, the bank will likely...

• Give you one of an allowed 3 strikes

• Provide you with a warning

• Terminate service relationships or increase transaction fees

The PCI compliance process is...

• Assess, remediate, rejoice

• Assess, remediate, report

• Allow access, remediate, report