PCI SSCPCI DSSIncident ResponseEASYFree question
What is an incident response plan in PCI DSS?
- A.A business continuity plan for restoring payment services, covering failover sites and staff relocation after outages
- B.A schedule of quarterly vulnerability scans, approved scanning vendor reports, and remediation of high-risk findings
- C.A documented set of procedures for detecting, responding to, and recovering from security incidents affecting cardholder data
- D.A policy for issuing, rotating, and retiring cryptographic keys used to protect stored account numbers
Why C is correct
An incident response plan provides documented procedures for handling security incidents that could affect cardholder data, from detection through recovery.
Know someone studying for PCI DSS? Send them this one.