PCI SSCPCI DSSIncident ResponseEASYFree question
What constitutes a security incident in PCI DSS context?
- A.Any scheduled maintenance window, planned patch deployment, or routine firewall change that interrupts payment authorization services
- B.Any event that potentially compromises the confidentiality, integrity, or availability of cardholder data or the systems that process, store, or transmit it
- C.Any confirmed theft of full track data, PINs, or card verification codes from a payment terminal or server
- D.A failed login on a cardholder data system, a blocked port scan, or any other event that the firewall already dropped
Why B is correct
A security incident is any event that could compromise the CIA of cardholder data or CDE systems, including suspected and confirmed events.
Know someone studying for PCI DSS? Send them this one.