Detect, Report, and Respond Quiz

10.7.1. applies only to service providers *

True

False

10.7.2 will supersede 10.7.1 and is best practice until March 31, 2025 *

True

False

A great place to incorporate 10.7.2 and 10.7.3 is within your organization's Incident Response Plan *

True

False

What must be included in an appropriate response to critical security control system failures (select all that apply) *

Restoring security functions.

Identifying and documenting the duration of the security failure.

Determining whether further actions are required as a result of the security failure.

A list of excuses.

What new security control or process will be implemented to ensure there will be no reoccurrence of the failure

Log Management for PCI DSS Compliance