PCI Incident Response & Data Breach Management

Question 1

What must a PCI-compliant incident response plan include?

Accepted Answer

Roles and responsibilities, communication procedures, containment strategies, forensic investigation steps, and recovery procedures

Answer

PCI DSS requires a documented incident response plan covering detection, containment, eradication, recovery, notification procedures, root cause analysis, and plan testing.

Question 2

What is the first priority during a payment data breach?

Accepted Answer

Containing the breach to prevent further data loss while preserving evidence

Answer

Containment stops the bleeding by isolating affected systems, blocking attack vectors, and preserving forensic evidence, while maintaining business continuity where possible.

Question 3

What is a PCI Forensic Investigator (PFI)?

Accepted Answer

A PCI Council-approved organization that investigates payment data breaches

Answer

PFIs are organizations approved by the PCI SSC to conduct forensic investigations of payment card data compromises, determining breach scope, timeline, and root cause.

Question 4

What notification requirements apply after a payment data breach?

Accepted Answer

Notify payment brands, acquiring bank, and affected individuals as required by applicable breach notification laws

Answer

Breach notification requirements vary by jurisdiction but generally require notifying card brands, acquiring banks, affected individuals, and potentially state attorneys general within specified timeframes.

Question 5

How often should the incident response plan be tested?

Accepted Answer

At least annually through tabletop exercises or simulated incidents

Answer

PCI DSS requires annual testing of the incident response plan to ensure team members understand their roles and the plan effectively addresses potential breach scenarios.

PCI - Certified Payment Card Industry Specialist Practice Test

PCI - Certified Payment Card Industry Specialist Practice Test

PCI Incident Response & Data Breach Management