PCI Exam CPSA Topic 2 Question 38 Discussion

Actual exam question for PCI's Card Production Security Assessor (CPSA) Qualification Exam exam

Question #: 38
Topic #: 2

[All Card Production Security Assessor (CPSA) Qualification Exam Questions]

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

AUntil each applicable payment brand has accepted (and signed off) the ROC and AOC

BAs long as the entity under assessment is a client of the CPSA Company

C3 years

D1 year

Show Suggested Answer

Suggested Answer: C

by Ronny at Sep 15, 2024, 06:14 PM

Limited Time Offer

25%

Off

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alyssa

2 days ago

Wait, isn't it 3 years? I remember reading that in the documentation somewhere.

upvoted 0 times

...

Nenita

14 days ago

I'm not sure, but I think it's better to keep the workpapers for 3 years just to be safe.

upvoted 0 times

...

Ressie

24 days ago

I agree with Ricki. It makes sense to keep the workpapers until the payment brands have accepted the report.

upvoted 0 times

...

Carin

26 days ago

Hmm, I'm pretty sure it's until the payment brands sign off on the ROC and AOC. That makes the most sense to me.

upvoted 0 times

Merri

11 days ago

C) 3 years

upvoted 0 times

...

Princess

14 days ago

A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC

upvoted 0 times

...

Ricki

26 days ago

I think the answer is A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC.

upvoted 0 times

...