Description

Exam Name: Card Production Security Assessor (CPSA) – Physical (New)
Exam Code: CPSA_P_New
Related Certification(s): PCI Card Production Security Assessor Qualification
Certification Provider: PCI Security Standards Council
Actual Exam Duration: 90 Minutes
Number of CPSA_P_New practice questions in our database: 50 (updated)

Expected CPSA_P_New Exam Topics, as outlined by PCI:

Topic 1: Management of Cryptographic Keys
This section evaluates the knowledge of professionals handling cryptographic environments in card production. It includes key generation, storage, transfer, and disposal methods. A strong grasp of key management life cycles, secure storage techniques, and industry-approved algorithms is crucial. One core skill tested is ensuring secure key operations throughout the production process.

Topic 2: EMV Chip Personalization & Data Handling
This section assesses the candidate’s ability to manage and prepare EMV data and personalize chip cards securely. It focuses on scripting processes, EMV compliance, and integrity controls during IC programming. A vital skill tested is managing secure environments for chip personalization according to global standards.

Topic 3: Physical Facility Security
This portion tests the ability to evaluate physical protections at card manufacturing and fulfillment centers. Candidates should understand access control systems, surveillance setups, and the segmentation of secure areas. The main focus is identifying physical risks and validating effective defense mechanisms.

Topic 4: Card Issuance & Fulfillment Operations
Here, the emphasis is on secure card issuance practices, PIN handling, and destruction procedures for sensitive data. The exam gauges your ability to monitor the production process, maintain traceability, and apply tamper-evident controls. One essential competency includes implementing strong operational safeguards.

Topic 5: Documentation & Compliance Reporting
This section focuses on the skills required to prepare and maintain accurate reports for PCI assessments. Candidates must be familiar with preparing required compliance forms and aligning reports with PCI SSC documentation standards. A key area of evaluation is ensuring transparent and complete reporting during security audits.