Which PCI DSS compliance program is associated with American Express?

Which PCI DSS compliance program is associated with American Express?

• A. DSOP
• B. DISC
• C. Data Security Program
• D. Site Data Protection (SDP)

Answer: (A)

The main idea here is that card brands sometimes have their own security programs on top of PCI DSS, tailored to how their network handles data. American Express uses a specific program called Data Security Operating Policy, or DSOP. This DSOP framework provides AmEx‑focused requirements and attestations for merchants who process AmEx transactions, complementing PCI DSS by addressing brand‑specific controls and expectations. So why this is the best choice: DSOP is the recognized AmEx program, and it directly aligns with how AmEx wants merchants to protect cardholder data and demonstrate compliance within their network. The other names are not associated with American Express; they refer to security programs used by other networks or are generic terms, not the AmEx program.

The main idea here is that card brands sometimes have their own security programs on top of PCI DSS, tailored to how their network handles data. American Express uses a specific program called Data Security Operating Policy, or DSOP. This DSOP framework provides AmEx‑focused requirements and attestations for merchants who process AmEx transactions, complementing PCI DSS by addressing brand‑specific controls and expectations.

So why this is the best choice: DSOP is the recognized AmEx program, and it directly aligns with how AmEx wants merchants to protect cardholder data and demonstrate compliance within their network. The other names are not associated with American Express; they refer to security programs used by other networks or are generic terms, not the AmEx program.