A company processes sensitive cardholder information that is stored in an internal production database and accessed by internet-facing web servers. The company's Chief Information Security Officer (CISO) is concerned with the risks related to sensitive data exposure and wants to implement tokenization of sensitive information at the record level. The company implements a one-to-many mapping of primary credit card numbers to temporary credit card numbers. Which of the following should the CISO consider in a tokenization system?
The correct answer is: C. Single-use translation
Tokenization replaces sensitive data, such as credit card numbers, with a non-sensitive equivalent called a token. For this process to ensure security and meet compliance requirements, the system should use single-use translation, which involves creating unique, one-time-use tokens for each transaction or record.
In this scenario:
Why the other options are incorrect:
Data field watermarking:
Field tagging:
Salted hashing:
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams