Which of the following best describes this process?

A vendor receives cardholder information and keys from a bank.

The vendor then performs the following:

* Uses its HSM to create keys

* Creates cardholder information specific to each cardholder, including name and PAN

* Formats the data for the hardware that will put it on a card

* Writes it to an encrypted file

Which of the following best describes this process?
A . Data creation
B . Data preparation
C . Manufacture
D . Pre-personalization

Answer: B

Explanation:

Data preparation is the process of creating cardholder data and keys for each card, and formatting them for the hardware that will put them on a card. Data preparation involves the use of an HSM to generate keys and encrypt data, and the creation of an encrypted file that contains the cardholder data and keys. Data preparation is one of the steps in the card production lifecycle, and it precedes the manufacture and personalization of the cards.

References:

Card Production Security Assessor (CPSA) Qualification Requirements, v1.0, April 2019, page 10

PCI Card Production Logical Security Requirements, v2.0, April 2019, page 9 PCI Card Production Physical Security Requirements, v2.0, April 2019, page 9