What role should the CISO play in properly scoping a PCI environment?

What role should the CISO play in properly scoping a PCI environment?
A . Validate the business units’ suggestions as to what should be included in the scoping process
B . Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
C . Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data
D . Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope

View Answer

Answer: C