Which standard covers physical and logical security requirements for systems and business processes?

Which standard covers physical and logical security requirements for systems and business processes?

• A. PA-DSS
• B. PCI Card Production
• C. PCI DSS
• D. PCI P2PE

Answer: (B)

PCI DSS lays out security controls to protect cardholder data across the whole environment, covering both physical and logical protections for the systems and the business processes that handle that data. It addresses how facilities and devices are secured (physical security) as well as how access, networks, monitoring, and testing are managed (logical security). This broad, end-to-end scope is why it’s the standard that applies to securing systems and processes that touch card data. The other options focus on narrower areas—payment applications, specific encryption solutions, or aren’t recognized as a comprehensive PCI security standard—so they don’t fit as well for covering both physical and logical security across the whole environment.

PCI DSS lays out security controls to protect cardholder data across the whole environment, covering both physical and logical protections for the systems and the business processes that handle that data. It addresses how facilities and devices are secured (physical security) as well as how access, networks, monitoring, and testing are managed (logical security). This broad, end-to-end scope is why it’s the standard that applies to securing systems and processes that touch card data. The other options focus on narrower areas—payment applications, specific encryption solutions, or aren’t recognized as a comprehensive PCI security standard—so they don’t fit as well for covering both physical and logical security across the whole environment.