Where can misprinted, partially finished cards be shredded?

Where can misprinted, partially finished cards be shredded?
A . In any HSA room approved by the security manager
B . Either in the HSA printing room or destruction room
C . Only in the HSA destruction room
D . Either in the HSA destruction room or a loading bay that meets all requirements of a destruction
room

View Answer

Answer: C

Explanation:

According to the PCI Card Production Physical Security Requirements, one of the security controls for card destruction is to ensure that misprinted, partially finished, or rejected cards are shredded only in the HSA destruction room. This is to prevent unauthorized access, theft, or misuse of the cards, which may contain sensitive data or features. The HSA destruction room should have adequate security measures, such as locks, alarms, cameras, etc., to protect the cards until they are shredded. The shredding process should render the cards unusable and unrecognizable, and the shredded material should be disposed of securely.

References: PCI Card Production Physical Security Requirements, Version 1.0, April 2019, Section 1.1, Objective 5, Requirement 5.1.1, Page 111