PCI SSCPCI DSSIncident ResponseEASYFree question
Where should the incident response plan be stored and who should have access?
- A.The plan should be readily accessible to all IR team members, stored in multiple locations (including offline copies), and available even if primary systems are compromised
- B.The plan should be held by the compliance officer, kept on the corporate file server (inside the CDE), and shared with all QSAs at the time of the annual assessment
- C.The plan should be stored on a single hardened server (inside the cardholder data environment), restricted to the CISO, and distributed to all staff when an incident occurs
- D.The plan should be printed for all managers, filed in the legal department (with the contracts), and retired after each audit
Why A is correct
The IR plan must be accessible to all team members, stored in multiple locations including offline copies, ensuring availability even during system compromise.
Know someone studying for PCI DSS? Send them this one.