Exam QSA_New_V4 Topic 4 Question 60 Discussion

Actual exam question for PCI SSC's QSA_New_V4 exam
Question #: 60
Topic #: 4
Which of the following parties is responsible for completion of the Controls Matrix for the Customized Approach?

Suggested Answer: C Vote an answer

UnderAppendix D - Customized Approach, it is clearly stated that theentity is responsiblefor completing theControls Matrixand theTargeted Risk Analysis (TRA). The assessor may assist in completion, but accountability for content lies with the entity.
* Option A:Incorrect. QSAs may assist but are not solely responsible.
* Option B:Incorrect. This overstates who is responsible; only the entity is ultimately accountable.
* Option C:Correct. The entity being assessed is responsible for completing the Controls Matrix and TRA.
* Option D:Incorrect. Card brands or acquirers are not involved in document creation.

by Hubery at Oct 16, 2026, 07:04 PM

Limited Time Offer

15%

Off

Get Premium QSA_New_V4 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10