PCI SSCPCI DSSIncident ResponseEASYFree question
What are the basic components of a PCI DSS incident response plan?
- A.Asset inventory procedures, vulnerability scanning schedules, patch deployment windows, change control approvals, and quarterly firewall rule review cycles for the whole network
- B.Roles and responsibilities, communication procedures, containment strategies, eradication and recovery procedures, evidence preservation, and lessons learned processes
- C.Encryption key custodians, password rotation schedules, badge issuance rules, visitor logs, and annual penetration test reports covering the segmentation controls
- D.Business impact analysis, data retention schedules, secure coding standards, and vendor onboarding checklists
Why B is correct
A complete IR plan includes roles/responsibilities, communication procedures, containment, eradication, recovery, evidence preservation, and lessons learned.
Know someone studying for PCI DSS? Send them this one.