What is the primary goal of monitoring and alerting in the cardholder data environment?

• A. To store logs for audit purposes only.
• B. To increase data throughput.
• C. To alert personnel to suspected compromises.
• D. To encrypt data at rest.

Answer: (C)

Monitoring and alerting focus on detecting security events in the cardholder data environment and notifying the right people so they can respond quickly. This quick notification enables containment and remediation before an attacker can cause significant damage or exfiltrate data. Logs and data are collected to support ongoing visibility and incident response, but their primary purpose in this context is to drive timely alerts and actions, not just to store information for audits. Increasing data throughput isn’t related to detecting and responding to incidents, and encrypting data at rest is about protecting data’s confidentiality, not about real-time detection. The point of monitoring and alerting is to recognize suspected compromises as soon as they happen and initiate a rapid response to protect cardholder data.