U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

PCI CPSA Exam - Topic 2 Question 38 Discussion

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?
C) 3 years
A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC
B) As long as the entity under assessment is a client of the CPSA Company
D) 1 year

PCI CPSA Exam - Topic 2 Question 38 Discussion

Actual exam question for PCI's CPSA exam
Question #: 38
Topic #: 2
[All CPSA Questions]

For how long must a CPSA Company maintain workpapers and technical information obtained during an assessment?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Ronny at Sep 15, 2024, 06:14 PM

Limited Time Offer

25%

Off

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Rosina
7 months ago
I heard they keep it as long as the client is active.
upvoted 0 times
...
Gennie
7 months ago
Nah, it can't be just 1 year, that's too short!
upvoted 0 times
...
Alease
7 months ago
I thought it was just 3 years? Confused now.
upvoted 0 times
...
Diane
7 months ago
Definitely option A! No doubt about it.
upvoted 0 times
...
Jennie
7 months ago
It's until each payment brand signs off, right?
upvoted 0 times
...
Aileen
8 months ago
I’m leaning towards option A, but I can't recall if it specifically mentioned the payment brands needing to sign off.
upvoted 0 times
...
Lyda
8 months ago
I’m a bit confused; I thought it was three years, but I also remember something about the client relationship affecting it.
upvoted 0 times
...
Beth
8 months ago
I feel like we practiced a question similar to this, and it was about how long to keep documents. I think it was longer than just one year.
upvoted 0 times
...
Audry
8 months ago
I think I remember something about maintaining workpapers until the ROC and AOC are signed off, but I'm not entirely sure if that's the right answer.
upvoted 0 times
...
Glen
8 months ago
Ah, I've got this! The workpapers and technical information need to be maintained until the payment brands have accepted and signed off on the ROC and AOC. I'm confident that's the right answer.
upvoted 0 times
...
Lawanda
8 months ago
Ugh, I'm a little fuzzy on the details here. I know it has to do with retaining the assessment documentation, but the time frame is escaping me. I'll have to make an educated guess on this one.
upvoted 0 times
...
Ernestine
8 months ago
This is a good one. I remember learning about the retention requirements for CPSA assessments, so I think I've got a pretty good handle on this. Let me review the options and select the correct answer.
upvoted 0 times
...
Jill
8 months ago
Okay, let me see here. I know the workpapers and technical information need to be maintained, but I'm not sure for how long exactly. I'll have to weigh the options and try to recall the relevant guidelines.
upvoted 0 times
...
Yvonne
8 months ago
Hmm, this seems like a straightforward question about retention requirements for CPSA assessments. I'll need to think carefully about the different options and the specific requirements.
upvoted 0 times
...
Titus
9 months ago
This one seems straightforward - I think the answer is A and B, since those are the options related to the discovery process.
upvoted 0 times
...
Francoise
2 years ago
I'm just gonna go with whichever option has the most dragons and unicorns. That's obviously the most secure choice.
upvoted 0 times
...
Lou
2 years ago
1 year? That seems way too short. I'm going with option A - gotta keep those workpapers around until the payment brands are happy.
upvoted 0 times
...
Celeste
2 years ago
As long as the client is a client? That doesn't sound right. I bet it's a set timeframe, like 3 years.
upvoted 0 times
Salena
2 years ago
Definitely, it's important to keep those workpapers for a certain period.
upvoted 0 times
...
Sommer
2 years ago
Yeah, that makes sense. It's probably a set timeframe.
upvoted 0 times
...
Della
2 years ago
I think it's 3 years.
upvoted 0 times
...
...
Alyssa
2 years ago
Wait, isn't it 3 years? I remember reading that in the documentation somewhere.
upvoted 0 times
Alaine
2 years ago
C) 3 years
upvoted 0 times
...
Ashleigh
2 years ago
B) As long as the entity under assessment is a client of the CPSA Company
upvoted 0 times
...
Erinn
2 years ago
A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC
upvoted 0 times
...
...
Nenita
2 years ago
I'm not sure, but I think it's better to keep the workpapers for 3 years just to be safe.
upvoted 0 times
...
Ressie
2 years ago
I agree with Ricki. It makes sense to keep the workpapers until the payment brands have accepted the report.
upvoted 0 times
...
Carin
2 years ago
Hmm, I'm pretty sure it's until the payment brands sign off on the ROC and AOC. That makes the most sense to me.
upvoted 0 times
Merri
2 years ago
C) 3 years
upvoted 0 times
...
Princess
2 years ago
A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC
upvoted 0 times
...
...
Ricki
2 years ago
I think the answer is A) Until each applicable payment brand has accepted (and signed off) the ROC and AOC.
upvoted 0 times
...

Save Cancel