Comment by indymike

I ended up owning a credit card merchant service processor when a customer hired my company, and then immediately not paying the bill - right when PCI was getting rolling. I'll never forget my first audit, where I was the CEO and lead developer for the MSP and the 20 something auditor was trying to disapprove my company because I had access to both production and development data. It took four days for them to figure out that because I owned the company, it was both acceptable, and unavoidable.