Why is it important to define roles and responsibilities in an incident response plan?

• A.Defined roles let the acquirer assign the investigation to the correct card brand team, reducing the number of notices sent and fines levied against the merchant
• B.Clear role definitions ensure that everyone knows what actions to take during an incident, preventing confusion and delays in response
• C.Written role assignments satisfy the QSA during the annual assessment, replacing the need to run an incident response exercise and keep contact lists current
• D.Named roles allow the security team to avoid notifying law enforcement directly, leaving the PFI to decide who is contacted and when notices are issued