Truncation is used to protect PAN when stored. True or False?

Truncation is used to protect PAN when stored. True or False?

• A. True
• B. False
• C. Not specified
• D. Sometimes True

Answer: (A)

Truncation protects the PAN when stored by removing digits so the stored value can no longer be used as a full PAN. PCI DSS requires rendering cardholder data unreadable at rest, and truncation is one of the recognized ways to achieve this. By keeping only a non-reconstructible portion of the PAN (or converting it to a non-PAN form), the data remains useful for certain processes while greatly reducing the risk if storage is breached. So, the statement is true. (Other protective methods like encryption or tokenization also fulfill this requirement, while masking is typically used for display rather than storage.)

Truncation protects the PAN when stored by removing digits so the stored value can no longer be used as a full PAN. PCI DSS requires rendering cardholder data unreadable at rest, and truncation is one of the recognized ways to achieve this. By keeping only a non-reconstructible portion of the PAN (or converting it to a non-PAN form), the data remains useful for certain processes while greatly reducing the risk if storage is breached. So, the statement is true. (Other protective methods like encryption or tokenization also fulfill this requirement, while masking is typically used for display rather than storage.)