PCI Exam CPSA Topic 1 Question 25 Discussion

Actual exam question for PCI's CPSA exam

Question #: 25
Topic #: 1

[All CPSA Questions]

During an assessment you ask to see employee records for employees with access to the HS

AThe records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

AEmployee information, including background checks, must be stored for at least seven years

BEmployee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

CThe vendor must retain the background information for at least 18 months after termination of contract

DThe vendor must only retain background information for all current employees, not for those that have been terminated

Show Suggested Answer

Suggested Answer: B

by Kenny at May 18, 2024, 11:19 AM

Limited Time Offer

25%

Off

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Linette

1 months ago

Haha, securely wiped within 2 years? What is this, the Dark Ages? Everyone knows data should be stored forever... or at least until the aliens come to take over.

upvoted 0 times

...

Roxanne

1 months ago

Ugh, these HR policy questions are the worst. I can never remember the specific retention periods. Maybe I should just guess and hope for the best.

upvoted 0 times

Billi

2 days ago

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

upvoted 0 times

...

Dyan

16 days ago

A) Employee information, including background checks, must be stored for at least seven years

upvoted 0 times

...

Raelene

1 months ago

Seriously? Only 1 year? That's way too short. I'm pretty sure the correct answer is A - 7 years minimum.

upvoted 0 times

...

Kip

2 months ago

Hmm, this seems like a tricky one. I'm not sure if the 1-year retention period is compliant, but I guess we'll have to check the regulations to be sure.

upvoted 0 times

Malcom

6 days ago

C) The vendor must retain the background information for at least 18 months after termination of contract

upvoted 0 times

...

Stefany

15 days ago

C) The vendor must retain the background information for at least 18 months after termination of contract

upvoted 0 times

...

Meghann

16 days ago

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

upvoted 0 times

...

Katie

18 days ago

A) Employee information, including background checks, must be stored for at least seven years

upvoted 0 times

...

Son

1 months ago

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

upvoted 0 times

...

Ivette

1 months ago

A) Employee information, including background checks, must be stored for at least seven years

upvoted 0 times

...

Carmelina

2 months ago

Oh, that makes sense. It's important to follow regulations to protect sensitive information.

upvoted 0 times

...

Lynelle

2 months ago

I think it's because of compliance regulations. We need to store background information for at least seven years.

upvoted 0 times

...

Carmelina

3 months ago

Why do we need to keep employee records for so long?

upvoted 0 times

...