Requirement 12.10.3 mandates that an organization designate personnel to be available on a 24/7 basis to respond to security alerts.

Requirement 12.10.3 mandates that an organization designate personnel to be available on a 24/7 basis to respond to security alerts.

• A. It requires designated personnel to be available 24/7 to respond to alerts.
• B. It requires weekly vulnerability scans.
• C. It requires annual incident drills.
• D. It requires external audits.

Answer: (A)

The key idea is to ensure there is always someone ready to respond to security events. Designating personnel to be available 24/7 for alert response ensures that security incidents can be detected, triaged, and acted upon immediately, which is essential for minimizing impact and containment time. This exact focus on continuous availability for incident response is what the statement addresses. The other options refer to different aspects of security work: weekly vulnerability scans relate to ongoing vulnerability management rather than who responds to alerts; annual incident drills pertain to testing the incident response process itself, not the obligation to have responders on call at all times; external audits are assessment activities, not a requirement about staffing for incident response.

The key idea is to ensure there is always someone ready to respond to security events. Designating personnel to be available 24/7 for alert response ensures that security incidents can be detected, triaged, and acted upon immediately, which is essential for minimizing impact and containment time. This exact focus on continuous availability for incident response is what the statement addresses.

The other options refer to different aspects of security work: weekly vulnerability scans relate to ongoing vulnerability management rather than who responds to alerts; annual incident drills pertain to testing the incident response process itself, not the obligation to have responders on call at all times; external audits are assessment activities, not a requirement about staffing for incident response.