Practice Question · CISSP Study Group

Practice Question

Alice runs a small online retail company; many of her customers are from the United States. Currently, she accepts only blockchain-based payment, but she is considering the use of credit cards. After investigating Payment Card Industry Data Security Standard (PCI DSS) requirements, she decides that the cost of compliance would outweigh the additional revenue. Which of the following best describes this decision?

A. Social engineering

B. PCI DSS Merchant Level 3

C. Card verification value (CVV)

D. Risk avoidance

4 comments