An employee is taking a credit card payment over the phone, but the payment system has a temporary outage. To avoid inconveniencing the customer, the employee writes down the credit card number and…

The correct answer is B. PCI. PCI DSS (Payment Card Industry Data Security Standard) governs how organizations must handle cardholder data, including credit card numbers and expiration dates. One of its core requirements is that sensitive authentication data must never be stored in plaintext - especially on…

Networking

Question

An employee is taking a credit card payment over the phone, but the payment system has a temporary outage. To avoid inconveniencing the customer, the employee writes down the credit card number and expiration date on a notepad to be entered later. This is in violation of:

Options

APHI
BPCI
CPll
DPGP

How the community answered

(23 responses)

A
9% (2)
B
87% (20)
D
4% (1)

Explanation

PCI DSS (Payment Card Industry Data Security Standard) governs how organizations must handle cardholder data, including credit card numbers and expiration dates. One of its core requirements is that sensitive authentication data must never be stored in plaintext - especially on unsecured physical media like a notepad. Writing down a card number to enter later is a direct violation of PCI DSS. PHI (A) relates to medical records under HIPAA. PII (C) is a broader category of personal data. PGP (D) is an encryption protocol, not a compliance standard.

Topics

#PCI DSS#credit card compliance#data security#regulatory compliance

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice