An entity is using custom software in their CDE.

TheSecure Software Lifecycle (SLC) Standardis part of PCI’sSoftware Security Framework (SSF). If an entity's software is developed under aPCI-recognised Secure SLC process, it maysatisfy parts of Requirement 6, especially around secure coding practices and vulnerability management.

Option A:❌Incorrect. SLC compliance alone doesn’t grant full PCI DSS compliance.

Option B:✅Correct. Secure SLC can help meetmany of the development-related controls.

Option C:❌Incorrect. There isimpact— potentially reducing scope/testing.

Option D:❌Incorrect. The software remainsin scope, but fewer controls may need to be separately validated.