Which statement about training content for POS personnel is true?

• A. Verifying the identity of any third-party persons claiming to be repair or maintenance personnel
• B. Training should be optional
• C. Training excludes suspicious behavior
• D. Training only covers device pricing and promotions

Answer: (A)

POS personnel training should emphasize verifying the identity of anyone claiming to be a repair or maintenance person who needs access to the payment environment. This step helps prevent unauthorized access and counters social engineering, where someone could pose as a technician to tamper with devices or steal data. Training should be seen as a required part of security awareness, and it should cover recognizing and reporting suspicious behavior rather than being optional. It also goes beyond routine duties like pricing or promotions, focusing on concrete access-control practices that protect cardholder data.