12.10.4Suspected and confirmed security incidents that could impact the CDE are responded to immediately

Defined Approach Requirements:

Personnel responsible for responding to suspected and confirmed security incidents are appropriately and periodically trained on their incident response responsibilities.

Defined Approach Testing Procedures:

12.10.4 Examine training documentation and interview incident response personnel to verify that personnel are appropriately and periodically trained on their incident response responsibilities.