Which area is considered sensitive for monitoring access under facility controls?

Which area is considered sensitive for monitoring access under facility controls?

• A. A sensitive area includes data centers, server rooms, or any area housing systems that store, process, or transmit cardholder data.
• B. A vault is the only sensitive area.
• C. Outdoor parking areas are considered sensitive.
• D. Public showroom floors are sensitive.

Answer: (A)

Monitoring access under facility controls focuses on protecting places where cardholder data is stored, processed, or transmitted. These sensitive areas include data centers, server rooms, or any area housing systems that handle cardholder data. The reason this is the best choice is that access to these spaces directly affects the security of the systems and data they support; tracking who enters and leaves helps prevent tampering, theft, or exposure of cardholder information. A vault is not the only sensitive area—while it would be sensitive, PCI scope covers multiple locations that house or protect data and systems. Outdoor parking areas and public showroom floors typically do not contain the systems or data relied upon for payment processing, so they aren’t designated as sensitive in this context.

Monitoring access under facility controls focuses on protecting places where cardholder data is stored, processed, or transmitted. These sensitive areas include data centers, server rooms, or any area housing systems that handle cardholder data. The reason this is the best choice is that access to these spaces directly affects the security of the systems and data they support; tracking who enters and leaves helps prevent tampering, theft, or exposure of cardholder information. A vault is not the only sensitive area—while it would be sensitive, PCI scope covers multiple locations that house or protect data and systems. Outdoor parking areas and public showroom floors typically do not contain the systems or data relied upon for payment processing, so they aren’t designated as sensitive in this context.