PFI

A PCI Forensic Investigator (PFI) is a person or firm qualified by the PCI Council to act to investigate data breaches or compromises, gathering evidence from merchant sites, computers and more. PFIs work for Qualified Security Assessor Companies.

During an investigation, PFIs work to limit any ongoing damage by stopping breaches as soon as possible, while collecting evidence about the incident that has occurred.

In some cases for companies who process smaller numbers of transactions, a "PFI Lite" process may be available.

After the PFI completes their investigation, they may help the affected organization complete a Self-Assessment Questionnaire.