PCI SSCPCI DSSIncident ResponseEASYFree question
What communication procedures should an IR plan include?
- A.Vendor onboarding contacts, supplier payment schedules, marketing announcement templates, shareholder reporting calendars, and press release approval workflows
- B.Notification lists for the ASV, the PCI SSC council board, the issuing banks, the QSA team, and the regulator that audits the organization
- C.Escalation paths for the help desk, status pages for customers, internal chat channel rules, ASV contact details, and an annual call tree test
- D.Internal escalation paths, external notification procedures for payment brands and acquirers, customer notification processes, law enforcement contacts, and regulatory reporting requirements
Why D is correct
IR communication procedures must cover internal escalation, payment brand/acquirer notification, customer communication, law enforcement, and regulatory reporting.
Know someone studying for PCI DSS? Send them this one.