$54.$

Which scenario would support a similar size

being used for PCI DSS assessment of an entity

with multiple facilities located in different regions?

O Security policies and procedures are independent defined by

each facility

O Security policies and procedures are standardized for each

region

O Security policies are centralized and procedures consistently

implemented across all regions

O Security policies are centrally defined and each facility defines

their own procedures for implementing the policies