Response Plan
PCIComplianceHubLast updated
The documented plan an entity activates when a security incident is suspected or confirmed: who does what, who is told, and how the payment brands and the acquirer are notified. The full entry is under Incident Response Plan, which is the standard's term and Requirement 12.10's subject; this one exists because the shorter name is common.
Related. Incident Response Plan