PCI compliance requirements are categorized into levels based on the volume of credit card transactions processed annually.
Level 1: Over 6 million transactions per year.
Level 2: 1 to 6 million transactions per year.
Level 3: 20,000 to 1 million transactions per year.
Level 4: Less than 20,000 transactions per year.
Why This is Correct:
The number of transactions is the primary determinant of compliance level and dictates the level of scrutiny and reporting required.
Why Other Options Are Incorrect:
A & B: Data retention types and duration are relevant but not the basis for compliance levels.
C. Organization Size: Compliance levels are transaction-based, not dependent on organization size.
References:
PCI-DSS standards explicitly outline compliance criteria based on transaction volume, as emphasized by EC-Council CISO materials.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit