PCI SSCPCI DSSIncident ResponseEASYFree question
When should the incident response plan be updated?
- A.After each quarterly scan, after each card brand fine, when the acquirer changes, after the QSA visit, and whenever staff take leave
- B.Before each ASV scan, after each change to the website design, when a new payment brand is accepted, and once in three years
- C.After each incident, after testing exercises, when the environment changes, after personnel changes, and at least annually
- D.When the merchant level changes, after a passing ROC, when new card brands are accepted, after each fiscal year close, and on the PCI SSC's request
Why C is correct
The IR plan should be updated after incidents, testing, environment changes, personnel changes, and during the required annual review.
Know someone studying for PCI DSS? Send them this one.