Which department should management consult to confirm pre-hire background checks for personnel with access to cardholder data?

• A. Human Resources management
• B. Marketing
• C. IT
• D. Legal

Answer: (A)

Pre-hire background checks for people who will access cardholder data are part of the hiring and onboarding process. That responsibility rests with Human Resources management, since HR handles recruitment, screening, verification of prior employment, and obtaining necessary disclosures. PCI DSS requires that personnel with access to cardholder data are properly vetted before access is granted, so management should confirm these checks through HR. IT handles the technical side of granting access once verification is done, but the decision and process of screening come from HR. Legal may provide guidance on consent and privacy, but HR leads the background checks.