Time data must be protected; which option best reflects this requirement?

Time data must be protected; which option best reflects this requirement?

• A. Time data should be visible to all users.
• B. Time data should be stored only in memory.
• C. Time data is protected.
• D. Time data can be discarded after a day.

Answer: (C)

Protecting time data means treating it as sensitive and applying the same safeguards you use for other cardholder data. The best choice says plainly that time data is protected, which implies using proper controls during storage and transmission, restricting who can access it, and handling and disposing of it securely. Letting time data be visible to all users breaks confidentiality, storing it only in memory isn’t enough because data in memory can be exposed or dumped, and discarding it after a day speaks to retention rather than guaranteeing protection throughout its lifecycle.

Protecting time data means treating it as sensitive and applying the same safeguards you use for other cardholder data. The best choice says plainly that time data is protected, which implies using proper controls during storage and transmission, restricting who can access it, and handling and disposing of it securely. Letting time data be visible to all users breaks confidentiality, storing it only in memory isn’t enough because data in memory can be exposed or dumped, and discarding it after a day speaks to retention rather than guaranteeing protection throughout its lifecycle.