Which of the following controls does the PCI DSS framework NOT require?

Which of the following controls does the PCI DSS framework NOT require?
A . Implement strong asset control protocols.
B . Implement strong access control measures.
C . Maintain an information security policy.
D . Maintain a vulnerability management program.

View Answer

Answer: A

Explanation:

The PCI DSS framework does not require implementing strong asset control protocols. Asset control protocols are policies and procedures that govern how an organization manages its physical and digital assets, such as inventory, equipment, software, data, etc. Asset control protocols may include aspects such as identification, classification, valuation, tracking, maintenance, disposal, etc. Asset control protocols are important for ensuring the security and integrity of an organization’s assets, but they are not part of the PCI DSS framework.