responsibilities, and communication and Review incident response plan contact strategies in the event of a compromise procedures including notification of the payment brands, at a minimum? Specific incident response procedures? Review incident response plan procedures Business recovery and continuity procedures? Review incident response plan procedures Data backup processes? Review incident response plan procedures Analysis of legal requirements for reporting Review incident response plan compromises? procedures Coverage and responses of all critical system Review incident response plan components? procedures Reference or inclusion of incident response Review incident response plan procedures from the payment brands? procedures 12.10.2 Is the plan reviewed and tested at least annually, including Review incident response plan all elements listed in Requirement 12.10.1? procedures Interview responsible personnel 12.10.3 Are specific personnel designated to be available on a 24/7 Observe processes basis to respond to alerts? Review policies Interview responsible personnel 12.10.4 Is appropriate training provided to staff with security breach Observe processes response responsibilities? Review incident response plan procedures Interview responsible personnel 12.10.5 Are alerts from security monitoring systems included in the Observe processes incident response plan? Review incident response plan procedures
responsibilities, and communication and contact strategies in the event of a compromise including notification of the payment brands, at a minimum? Review incident response plan procedures Specific incident response procedures? Review incident response plan procedures Business recovery and continuity procedures? Review incident response plan procedures Data backup processes? Review incident response plan procedures Analysis of legal requirements for reporting compromises? Review incident response plan procedures Coverage and responses of all critical system components? Review incident response plan procedures Reference or inclusion of incident response procedures from the payment brands? Review incident response plan procedures 12.10.2 Is the plan reviewed and tested at least annually, including all elements listed in Requirement 12.10.1? Review incident response plan procedures Interview responsible personnel 12.10.3 Are specific personnel designated to be available on a 24/7 basis to respond to alerts? Observe processes Review policies Interview responsible personnel 12.10.4 Is appropriate training provided to staff with security breach response responsibilities? Observe processes Review incident response plan procedures Interview responsible personnel 12.10.5 Are alerts from security monitoring systems included in the incident response plan? Observe processes Review incident response plan procedures