Comment Re:Insurance (Score 1) 158
I worked for a company that falsified their PCI compliance. All you have to do is lie. Most of the auditors are simply box checkers and there's never any real test.
Until people start going to prison for these offenses, the biggest punishment to the companies will be paying for shitty "identity theft protection" for a year.