💼 12.10 Implement an incident response plan.

Contextual name: 💼 12.10 Implement an incident response plan.
ID: /frameworks/pci-dss-v3.2.1/12/10
Located in: 💼 12 Maintain a policy that addresses information security for all personnel.

Description

Be prepared to respond immediately to a system breach.

Section	Sub Sections	Internal Rules	Policies	Flags
💼 12.10.1 Create the incident response plan to be implemented in the event of system breach.
💼 12.10.2 Review and test the plan at least annually.
💼 12.10.3 Designate specific personnel to be available on a 24/7 basis to respond to alerts.
💼 12.10.4 Provide appropriate training to staff with security breach response responsibilities.
💼 12.10.5 Include alerts from security monitoring systems, including but not limited to intrusion-detection, intrusion-prevention, firewalls, and file-integrity monitoring systems.
💼 12.10.6 Develop a process to modify and evolve the incident response plan according to lessons learned and to incorporate industry developments.