PCI SSCPCI DSSSecurity PolicyEASYFree question
What must an incident response plan include?
- A.Penetration test results, quarterly scan reports, firewall rule listings, patch status summaries, and a vendor contact list for the payment gateway
- B.Roles and responsibilities, communication procedures, containment strategies, forensic procedures, and business recovery processes
- C.Card brand fee schedules, acquirer contract terms, insurance policy details, chargeback ratios, and the board's approved communications budget
- D.Backup schedules, restore procedures, disk encryption settings, and a list of approved software
Why B is correct
Incident response plans must define roles, communication procedures, containment and eradication strategies, forensic procedures, recovery processes, and notification requirements.
Know someone studying for PCI DSS? Send them this one.