PCI/DSS Incident Response Plan

Review date: 30.09.25

​

This plan covers what to do if you or a staff member suspect or identify that a card machine device has been tampered with or substituted in a way that could cause a data breach.

 

You need to make sure that:

​

1. You or a staff member immediately switch off and remove any suspected or identified tampered card machine device from service. This device must not be used and should be placed in a secure location.
    

2. You or a staff member report the suspected or identified breach to Head Office immediately by contacting Fiona Brown, Mabel Coolin-Weston or a member of staff in the Head Office accounts team on 01530 563100.
    

3. Staff should report and escalate to you, or another appropriate manager, any suspicious behaviour they identify relating to a card machine device.