PCI Forensic Investigators (PFIs) help determine the occurrence of a cardholder data compromise and when and how it may have occurred. These PCI Forensic Investigators are qualified by the Council's program and must work for a Qualified Security Assessor company that provides a dedicated forensic investigation practice.
They perform investigations within the financial industry using proven investigative methodologies and tools. They also provide relationships with law enforcement to support stakeholders with any resulting criminal investigations.
This form is used to review PFIs and their work product, and is intended to be completed after a forensic investigation. While the primary audience of this form are PFI clients (merchants or service providers), there are several questions at the end, under “PFI Feedback Form for Payment Brands and Others,” to be completed as needed by Payment Brand participants, banks, and other relevant parties.
Information collected from the Feedback Form will be held in strict confidence and used for the sole purpose of improving the quality of service provided by the PFI.