Practice Test GeeksPCI - Certified Payment Card Industry Specialist Practice Test
← All PCI Flashcard Decks

Leadership & Team Management Flashcards

7 cards from real PCI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Leadership & Team Management flashcards as text

  1. Under PCI DSS v4.0, how often must personnel complete security awareness training?

    Answer: Upon hire and at least once every 12 months

    Requirement 12.6 requires awareness training upon hire and at least every 12 months.

  2. For service providers, who must establish responsibility for protecting cardholder data and the PCI DSS compliance program?

    Answer: Executive management

    Requirement 12.4.1 assigns this responsibility to executive management for service providers.

  3. How often must PCI DSS scope be documented and confirmed by the entity?

    Answer: At least every 12 months and after significant changes

    Requirement 12.5.2 requires scope confirmation at least every 12 months and upon significant change.

  4. What must personnel do regarding their PCI DSS responsibilities under Requirement 12.1.3?

    Answer: Formally acknowledge them at least once every 12 months

    Roles and responsibilities must be defined and personnel must acknowledge them at least annually.

  5. What is the purpose of screening potential personnel before hire under Requirement 12.7?

    Answer: To reduce the risk of insider attacks

    Pre-hire screening minimizes the risk of attacks from internal sources.

  6. How often must the incident response plan be reviewed and tested?

    Answer: At least once every 12 months

    Requirement 12.10.2 requires annual review and testing of the incident response plan.

  7. Which item must a merchant maintain regarding third-party service providers (TPSPs)?

    Answer: A list of TPSPs with a description of services provided

    Requirement 12.8.1 requires a maintained list of TPSPs and the services they provide.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. pcisecuritystandards.org — Test delivery, eligibility, fees, exam format, passing score, renewal, retake fee, retake policy, score release, test dates · verified Oct 2026
  2. pearsonvue.com — Test delivery · verified Oct 2026