Which item is explicitly included in 12.10.1 as part of incident response planning?

Which item is explicitly included in 12.10.1 as part of incident response planning?

• A. Data backup processes.
• B. Physical office relocation plans.
• C. Vendor contract termination procedures.
• D. Software licensing terms.

Answer: (A)

The idea being tested is that incident response planning in PCI DSS encompasses how backups are used during and after an incident. Having data backup and restoration procedures part of the plan ensures the organization can quickly recover critical data, maintain availability, and preserve evidence for investigation when an incident occurs. That makes data backup processes explicitly included in this control. Relocation plans are more about broader business continuity or disaster recovery, not the incident response steps themselves. Vendor contract termination procedures fall under vendor management, and software licensing terms relate to legal/compliance issues rather than how to detect, respond to, and recover from security incidents.

The idea being tested is that incident response planning in PCI DSS encompasses how backups are used during and after an incident. Having data backup and restoration procedures part of the plan ensures the organization can quickly recover critical data, maintain availability, and preserve evidence for investigation when an incident occurs. That makes data backup processes explicitly included in this control.

Relocation plans are more about broader business continuity or disaster recovery, not the incident response steps themselves. Vendor contract termination procedures fall under vendor management, and software licensing terms relate to legal/compliance issues rather than how to detect, respond to, and recover from security incidents.