ABC Company must achieve compliance for PCI and SOX. Which of the following would BEST allow the organization to achieve compliance and ensure security? (Select THREE).

Question

Options

• AEstablish a list of users that must work with each regulation
• BEstablish a list of devices that must meet each regulation
• CCentralize management of all devices on the network
• DCompartmentalize the network
• EEstablish a company framework
• FApply technical controls to meet compliance with the regulation

• A
  4% (1)
• B
  78% (18)
• C
  4% (1)
• E
  13% (3)

Explanation

Payment card industry (PCI) compliance is adherence to a set of specific security standards that were developed to protect card information during and after a financial transaction. PCI compliance is required by all card brands. There are six main requirements for PCI compliance. The vendor must: Build and maintain a secure network Protect cardholder data Maintain a vulnerability management program Implement strong access control measures Regularly monitor and test networks Maintain an information security policy To achieve PCI and SOX compliance you should: Establish a list of devices that must meet each regulation. List all the devices that contain the Compartmentalize the network. Compartmentalize the devices that contain the sensitive data to form a security boundary. Apply technical controls to meet compliance with the regulation. Secure the data as required.

No community discussion yet for this question.