Comment by al_borland
6 months ago
It’s all theater so they can sell the idea that they’re doing everything they can, and if something does happen they can shift blame.
6 months ago
It’s all theater so they can sell the idea that they’re doing everything they can, and if something does happen they can shift blame.
In many cases, it may be to fulfill rules associated with PCIDSS requirements, even if the company never sees the credit card. This all originates from consultants, and the consultants are engaged in security theater.