What does PCI DSS require for incident detection capability?

• A.Organizations must have the capability to detect security incidents at any time, including monitoring for intrusion detection alerts, file integrity monitoring alerts, and unauthorized access attempts
• B.Organizations must scan the cardholder data environment quarterly, including internal vulnerability scans, external ASV scans, and a penetration test after each significant change in the network layout
• C.Organizations must retain firewall configuration backups for a year, including rule review records, change tickets, and sign-off from the QSA before any rule modification reaches production systems
• D.Organizations must monitor the network during business hours, including daily log review by the help desk, and weekly alert summaries