Discuss PCI CPSA Exam Topic 1 Question 25

During an assessment you ask to see employee records for employees with access to the HS

AThe records include information about the screening process, including background information from the employee application process. The oldest background Information that is available is for an employee that left the vendor (terminated their contract) one year previously. You note this as non-compliant, why?

AEmployee information, including background checks, must be stored for at least seven years

BEmployee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

CThe vendor must retain the background information for at least 18 months after termination of contract

DThe vendor must only retain background information for all current employees, not for those that have been terminated

Suggested Answer: B

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

34 comments · newest first

Hana 11 months ago

The 18 months retention sounds right for vendors, but not for all cases.

Eva 11 months ago

No way, I thought they only needed to keep it for current employees.

Suzan 11 months ago

Wait, I thought it was only 5 years for some industries?

Bea 12 months ago

Totally agree, that's standard practice!

Artie 12 months ago

Employee records should be kept for at least seven years.

Krissy 1 year ago

I vaguely recall that there are strict guidelines about how long to keep background information, and I think it’s definitely longer than one year.

Pilar 1 year ago

I’m a bit confused about the rules for terminated employees. I thought we only needed to keep records for current employees, but that doesn’t seem right.

Harrison 1 year ago

I think I saw a practice question that mentioned retaining background checks for at least 18 months after termination. That might be relevant here.

Cassandra 1 year ago

I remember something about employee records needing to be kept for a specific duration, but I’m not sure if it’s seven years or something shorter.

Dierdre 1 year ago

Ah, I see the issue now. The vendor needs to retain the background information for at least 18 months after termination of contract, not just one year. I think option C is the correct answer.

Maia 1 year ago

Easy peasy! The answer is clearly B - employee information must be securely destroyed within 2 years after termination of contract. Anything longer than that is non-compliant.

Royal 1 year ago

I'm a bit confused on this one. Is it really seven years, or is there some other requirement I'm missing? I'll need to double-check the details before answering.

Lemuel 1 year ago

Okay, I think I've got this. The key is that employee information, including background checks, must be stored for at least seven years, so the one-year retention period is non-compliant.

Laquanda 1 year ago

Hmm, this seems like a tricky one. I'll need to carefully review the requirements around employee record retention to determine the correct answer.

Jaime 1 year ago

Hmm, the idea of Issues Management helping to decentralize risk at a high level is interesting. I'll need to think about how that could be leveraged by other Archer tools.

Avery 1 year ago

Hmm, I'm a bit confused by the syntax here. I'll need to review the DBMS_REDACT function documentation to make sure I understand the different options before answering.

Buffy 1 year ago

This seems like a straightforward regulatory question. I'll read through the options carefully and try to recall the key points from the Interagency Statement.

Carylon 1 year ago

I'm a bit unsure about this one. I think it might be the History Count, but I need to double-check what that actually does.

Linette 1 year ago

Haha, securely wiped within 2 years? What is this, the Dark Ages? Everyone knows data should be stored forever... or at least until the aliens come to take over.

Roxanne 1 year ago

Ugh, these HR policy questions are the worst. I can never remember the specific retention periods. Maybe I should just guess and hope for the best.

Desiree 1 year ago

↳ replying to Roxanne

C) The vendor must retain the background information for at least 18 months after termination of contract

Billi 1 year ago

↳ replying to Roxanne

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

Dyan 1 year ago

↳ replying to Roxanne

A) Employee information, including background checks, must be stored for at least seven years

Raelene 1 year ago

Seriously? Only 1 year? That's way too short. I'm pretty sure the correct answer is A - 7 years minimum.

Kip 2 years ago

Hmm, this seems like a tricky one. I'm not sure if the 1-year retention period is compliant, but I guess we'll have to check the regulations to be sure.

Malcom 1 year ago

↳ replying to Kip

C) The vendor must retain the background information for at least 18 months after termination of contract

Stefany 1 year ago

↳ replying to Kip

C) The vendor must retain the background information for at least 18 months after termination of contract

Meghann 1 year ago

↳ replying to Kip

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

Katie 1 year ago

↳ replying to Kip

A) Employee information, including background checks, must be stored for at least seven years

Son 1 year ago

↳ replying to Kip

B) Employee information must be securely destroyed (e.g. securely wiped) within 2 years (after termination of contract)

Ivette 1 year ago

↳ replying to Kip

A) Employee information, including background checks, must be stored for at least seven years

Carmelina 2 years ago

Oh, that makes sense. It's important to follow regulations to protect sensitive information.

Lynelle 2 years ago

I think it's because of compliance regulations. We need to store background information for at least seven years.

Carmelina 2 years ago

Why do we need to keep employee records for so long?

PCI CPSA Exam - Topic 1 Question 25 Discussion