General PCI

Question 1

What does account data include?

Answer 1

cardholder data and/or sensitive authentication data

Question 2

Define cardholder data

Answer 2

Cardholder data includes
- primary account number (PAN)
- cardholder name
- expiration date
- service code

Question 3

Define sensitive authentication data

Answer 3

Sensitive authentication dat includes
- full track data (magnetic-stripe data or equivalent on a chip)
- card verification code
- PINs/PIN blocks

Question 4

What data cannot be stored after authorization as defined in Req 3.3.1?

Answer 4

• full track data
• card verification code
• PIN/PIN block

Question 5

Storage must be kept to a minimum for what data elements as per Req 3.2?

Answer 5

PAN, cardholder name, service code, expiration date