PCI SSCPCI DSSIncident ResponseEASYFree question
What training must personnel receive regarding incident response?
- A.Staff handling incidents must complete a vendor certification exam, including penetration testing labs, forensic imaging drills, and legal certification
- B.Security staff must be trained on the card brand fee schedule, chargeback dispute handling, and PFI invoicing rules
- C.Personnel with incident response responsibilities must be trained on the IR plan, including their specific roles, escalation procedures, and evidence handling requirements
- D.Personnel must be trained on the plan at hire, with a refresher after a breach, and a signed acknowledgment from the manager
Why C is correct
IR team members must be trained on the plan, their specific roles, escalation procedures, and proper evidence handling techniques.
Know someone studying for PCI DSS? Send them this one.