What is required regarding training for staff with security breach response responsibilities?

• A. Verify that staff with breach response responsibilities are periodically trained
• B. Training is only for managers
• C. Training is not required
• D. Training occurs only after an incident

Answer: (A)

Regular, ongoing training for those who will handle security breach responses is essential so they can perform their roles effectively when an incident occurs. PCI DSS requires that personnel with incident response responsibilities receive training and that this training occur on a periodic basis, not only after an incident or limited to managers.

This training ensures responders know their specific duties, escalation paths, containment and recovery steps, and how to communicate with stakeholders and regulators. It should be documented and updated whenever the incident response plan or the environment changes, so the team stays prepared for evolving threats.