122k views
5 votes
Under the terms of PCI DSS, what organization may choose to pursue an investigation of this matter?

1) FBI
2) Local law enforcement
3) Bank
4) PCI SSC

User Ryan Doom
by
7.9k points

1 Answer

3 votes

Final answer:

The PCI Security Standards Council (PCI SSC) is responsible for pursuing investigations under the terms of PCI DSS, focusing on compliance and security of credit card data handling.

Step-by-step explanation:

The organization that may choose to pursue an investigation under the terms of the Payment Card Industry Data Security Standard (PCI DSS) is the PCI Security Standards Council (PCI SSC). While the Federal Bureau of Investigation (FBI) or local law enforcement may get involved in cases of criminal activity, such as fraud or hacking, it is the PCI SSC that is responsible for enforcing compliance with PCI DSS. Banks may also take part in investigations related to their issued cards or acquired merchants, but when it comes to PCI DSS violations, the PCI SSC leads the process of ensuring that companies are handling credit card data securely.

Under the terms of PCI DSS, the organization that may choose to pursue an investigation of this matter is the Bank that is impacted by a possible breach or non-compliance.

PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards that protect cardholder data and is applicable to organizations that handle credit card transactions. The PCI SSC (Payment Card Industry Security Standards Council) is the governing body responsible for maintaining and enforcing these standards. However, in case of a possible breach or non-compliance with PCI DSS, the bank is the primary organization that would initiate an investigation.

User Niltoid
by
7.7k points