Certified Information Systems Security Professional (CISSP) — Question 193

An organization is developing employee training content to increase awareness of Payment Card Industry (PCI) standards. What are the three types of awareness roles applicable to the organization?

Answer options

• A. All personnel, specialized, management
• B. Standard, privileged, administrator
• C. Basic, intermediate, advanced
• D. Technical, operational, administrative

Correct answer: A

Explanation

The correct answer is A because it identifies the three key roles involved in PCI awareness: all personnel need to understand basic requirements, specialized roles focus on specific responsibilities, and management oversees compliance. The other options do not accurately categorize the awareness roles necessary for PCI training.