When must HSA motion detectors generate an alarm event?

When must HSA motion detectors generate an alarm event?
A . Each time movement is detected
B . Each time movement is detected outside of regular business hours
C . Each time movement is detected and the access-control system indicates the room is occupied
D . Each time movement is detected and the access-control system indicates the room is not occupied

Answer: D

Explanation:

According to the PCI Card Production Physical Security Requirements, one of the security controls for high-security areas (HSAs) is to have motion detectors that generate an alarm event when movement is detected and the access-control system indicates the room is not occupied. This is to prevent unauthorized access or intrusion to the HSAs, where sensitive card production and provisioning activities take place. The motion detectors should be configured to cover all areas within the HSA and should be tested periodically to ensure proper functionality.

References: PCI Card Production Physical Security Requirements, Version 1.0, April 2019, Section 1.1, Objective 2, Requirement 2.1.1, Page 61