...a journey not a destination
Boss: You're telling me if we're PCI-DSS compliant we can get a better processing rate from the bank?
Security Professional: Yes, but we need to remain compliant year over year.
Boss: Ah yeah, but our sales margin will improve?
Security Professional: Yes, but we have to dedicate an ongoing level of effort to staying compliant!
Boss: Yeah, yeah but it will improve profitability!
Security Professional: But there is a tech cost.
Boss: Cost? of course, we'll buy you guys a new high-end coffee maker!