By what date did service providers must provide a secure service offering?

By what date did service providers must provide a secure service offering?

• A. December 31, 2016.
• B. June 30, 2016.
• C. June 30, 2017.
• D. No deadline.

Answer: (B)

This item tests when service providers had to deliver a secure service offering as part of PCI DSS guidance. The deadline was June 30, 2016, by which providers that store, process, or transmit cardholder data needed to have a secure service offering in place. A secure service offering is a documented description of the provider’s security controls and how they protect card data, giving merchants and others a clear view of the security environment they rely on. This deadline helped ensure customers could confidently assess the security of services before moving to PCI DSS v3.0. The other dates don’t fit because there was a defined cut-off date, not an indefinite timeline or a later requirement.

This item tests when service providers had to deliver a secure service offering as part of PCI DSS guidance. The deadline was June 30, 2016, by which providers that store, process, or transmit cardholder data needed to have a secure service offering in place. A secure service offering is a documented description of the provider’s security controls and how they protect card data, giving merchants and others a clear view of the security environment they rely on. This deadline helped ensure customers could confidently assess the security of services before moving to PCI DSS v3.0. The other dates don’t fit because there was a defined cut-off date, not an indefinite timeline or a later requirement.