Which policy governs the handling of payment information?

• A. Food safety policy.
• B. PCI or cash-handling policy.
• C. Marketing policy.
• D. Scheduling policy.

Answer: (B)

Handling payment information is governed by the PCI or cash-handling policy because card data is highly sensitive and requires strict controls. The PCI policy specifies how card data is collected, transmitted, stored, and disposed of, who may access it, and what security measures must be in place—such as encryption, secure payment devices, and not storing full card numbers or CVV codes after authorization. This protects customer payment details from unauthorized access and reduces risk. The other policies focus on food safety, marketing, or scheduling, and don’t set the rules for handling payment data.