What role should the CISO play in properly scoping a PCI environment?

What role should the CISO play in properly scoping a PCI environment?
A . Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope
B . Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
C . Validate the business units’ suggestions as to what should be included in the scoping process
D . Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

View Answer

Answer: D