Weak enforcement keeps PCI DSS compliance low

https://infosec.pub/post/39500279

You can write as much compliance as you want. It won’t enhance security or business practices until it hits hard board members personally, or hit hard shareholders benefits. Until then…