Casino sues security and incident response firm Trustwave over data breach. Suit raises questions about the efficacy of Payment Card Industry’s “Professional Forensic Investigator” services. The question raised by the lawsuit: How does a company qualify to offer forensic investigation services that meet the PCI Security Standards Council’s criteria? The PCI Council sets rules and performance requirements relating to the Forensic Investigator program, such as a dedicated digital investigation firm that provides proven digital investigation tools, as well as relationships with law enforcement agencies. Buyers should not assume that these experts will contain the compromise or prevent future compromises.”]
Source: https://www.inforisktoday.com/breach-investigations-whos-accountable-a-8812