What is an example of a security measure intended to protect cardholder data?

What is an example of a security measure intended to protect cardholder data?

• A. Data encryption keys stored in plaintext
• B. Strong cryptography used for data transmission
• C. Allowing unrestricted access to sensitive systems
• D. Using social engineering assessments

Answer: (B)

Utilizing strong cryptography for data transmission is a critical security measure designed to protect cardholder data. This method ensures that any information sent over networks is encrypted, making it significantly more difficult for unauthorized parties to intercept and comprehend the data. When strong cryptographic techniques are applied, even if data is captured during transmission, it remains unintelligible without the appropriate decryption keys. Data encryption keys stored in plaintext is not a secure practice, as this leaves sensitive information vulnerable and easily accessible to malicious actors. Allowing unrestricted access to sensitive systems poses a significant security risk, as it could lead to unauthorized access to cardholder data. Using social engineering assessments can help organizations identify vulnerabilities related to human factors but does not directly protect cardholder data during transmission. This context emphasizes the importance of adopting robust cryptographic measures to secure sensitive financial information effectively while illustrating the weaknesses in the other options.

Utilizing strong cryptography for data transmission is a critical security measure designed to protect cardholder data. This method ensures that any information sent over networks is encrypted, making it significantly more difficult for unauthorized parties to intercept and comprehend the data. When strong cryptographic techniques are applied, even if data is captured during transmission, it remains unintelligible without the appropriate decryption keys.

Data encryption keys stored in plaintext is not a secure practice, as this leaves sensitive information vulnerable and easily accessible to malicious actors. Allowing unrestricted access to sensitive systems poses a significant security risk, as it could lead to unauthorized access to cardholder data. Using social engineering assessments can help organizations identify vulnerabilities related to human factors but does not directly protect cardholder data during transmission.

This context emphasizes the importance of adopting robust cryptographic measures to secure sensitive financial information effectively while illustrating the weaknesses in the other options.