thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Targeted Risk Analysis (TRA)

PCI DSS v4 risk analysis used to justify the frequency of certain controls or to support customized approach controls.

Definition

PCI DSS v4 requires TRAs where requirements allow the entity to define frequency, such as how often to review certain logs, and for each requirement met using the customized approach. TRAs must be documented and reviewed at least every 12 months.

Example

A merchant performs a TRA to set the frequency of point-of-interaction device inspections.

Exam tip

Flexible frequencies in v4 require a documented TRA.

Related terms