The PCI Security Standards Council (PCI SSC) has published notable updates to its PCI Forensic Investigator (PFI) Program, including changes to its supporting documentation, Addendum to Qualified Security Assessor Agreement for PCI Forensic Investigators, and reporting templates. PCI Forensic Investigators are qualified by the Council and must work for a Qualified Security Assessor company that provides a dedicated forensic investigation practice. PFIs help determine the occurrence of a cardholder data compromise, and when and how it may have occurred, using proven investigative methodologies and tools.
