Under the terms of PCI DSS, which of the following groups should the organization report the breach to?

An organization has experienced a breach of customer transactions.

Under the terms of PCI DSS, which of the following groups should the organization report the breach to?
A . PCI Security Standards Council
B . Local law enforcement
C . Federal law enforcement
D . Card issuer

View Answer

Answer: D

Explanation:

Under the terms of PCI DSS, an organization that has experienced a breach of customer transactions should report the breach to the card issuer. The card issuer is the financial institution that issues the payment cards to the customers and that is responsible for authorizing and processing the transactions. The card issuer may have specific reporting requirements and procedures for the organization to follow in the event of a breach. The organization should also notify other parties that may be affected by the breach, such as customers, law enforcement, or regulators, depending on the nature and scope of the breach.

Reference: https://www.pcisecuritystandards.org/