PCI DSS requirement 8.x must be tracked as a discrete obligation under the city’s adopted PCI authority document. Which record should be created next in the lifecycle?
Select an answer to reveal the explanation.
Short Explanation
Think of the authority document as the statute book and the citation as the exact section number you care about. For PCI 8.x, create that citation under the parent mandate. Then you can map objectives without losing which requirement you meant.
Full Explanation
Citations are the discrete obligation records under an authority document. Tracking PCI DSS 8.x as a citation preserves regulatory lineage and enables mapping to control objectives and controls. Creating unrelated CIs, premature exceptions, or audits without citation linkage does not establish the Policy and Compliance content chain correctly.