Which entity is responsible for forensic investigations of account data compromise?

• A. QIR
• B. PCI SSC
• C. QSA/ISA
• D. Payment Brands

Answer: (D)

Forensic investigations of account data compromise are driven by the payment brands. Under the PCI Forensic Investigation program, the brands (Visa, Mastercard, and others) require a PCI Forensic Investigator to conduct the breach analysis, determine the scope and root cause, and report the findings. They oversee and coordinate the investigation, often working through the acquiring bank and the merchant. The other roles are focused on compliance assessment (QSA/ISA), standards governance (PCI SSC), or terminal/integration licensing (QIR), not on conducting forensic investigations.