PCI SSCPCI DSSIncident ResponseEASYFree question
What is the PRIMARY purpose of a PCI-DSS incident response plan?
- A.To provide a documented procedure for responding immediately to a system breach
- B.To prevent all security incidents, named in Requirement 12.10.3 as satisfying the around-the-clock availability obligation
- C.To satisfy insurance requirements
- D.To replace the need for security monitoring, which the v4.0 guidance accepts as a substitute for daily log review during change freezes
Why A is correct
The primary purpose is to provide a documented, tested procedure that enables the organization to respond immediately and effectively to a suspected or confirmed security breach.
Know someone studying for PCI DSS? Send them this one.