When Dealing with Compliance with the Payment Card Industry-Data Security

question 92

Multiple Choice

When dealing with compliance with the Payment Card Industry-Data Security Standard (PCI-DSS) , an organization that shares card holder information with a service provider MUST do which of the following?

• A) Perform a service provider PCI-DSS assessment on a yearly basis
• B) Validate the service provider's PCI-DSS compliance status on a regular basis
• C) Validate that the service providers security policies are in alignment with those of the organization
• D) Ensure that the service provider updates and tests its Disaster Recovery Plan (DRP) on a yearly basis

---

Definitions:

Confidence Interval

A range of values, derived from the statistics of the observed data, that is likely to contain the value of an unknown population parameter.

Null Hypothesis

The hypothesis in statistical testing that assumes no significant difference or effect in the population; it is the hypothesis that researchers aim to test against.

One-sample T Test

A statistical test used to determine whether the mean of a single sample differs significantly from a known or hypothesized population mean.

Standard Error

A statistical measure that estimates the accuracy of a sample mean by quantifying the dispersion of sample means around the population mean.