Valid Assessor_New_V4 Dumps shared by ExamDiscuss.com for Helping Passing Assessor_New_V4 Exam! ExamDiscuss.com now offer the newest Assessor_New_V4 exam dumps, the ExamDiscuss.com Assessor_New_V4 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com Assessor_New_V4 dumps with Test Engine here:
A sample of business facilities is reviewed during the PCI DSS assessment What is the assessor required to validate about the sample?
Correct Answer: D
Explanation The PCI DSS requires that the assessor validates that the sample of business facilities is representative of the entire population of facilities that are in scope for the assessment. According to the PCI DSS Requirement 12.8.5, "Maintain information about which PCI DSS requirements are managed by each service provider, and which are managed by the entity." Furthermore, according to the PCI DSS Requirement 12.9.1, "For service providers, provide the written agreement/acknowledgment to their customers as specified at Requirement 12.8.2." Therefore, the scenario that meets the PCI DSS requirements for validating the sample of business facilities is theone where all types and locations of facilities are represented, to ensure that the assessment covers the diversity and complexity of the card production environment. The other scenarios either do not account for the variability of the facilities, or do not follow the sampling methodology defined by the PCI DSS. References: PCI DSS v3.2.1, Card Production Security Assessor - Physical - Credly
