PCI DSS 3.2 Req 10.8 and 10.8.1 - The Process for Detecting, Reporting, and Responding to Failures in Security Mechanisms
If you're classified as a service provider you need to implement policies and procedures, and response mechanisms for addressing any failures in...