Are credit cards worth the risk?

Martin McKeay, a PCI assessor, has posted a good yet short blog entry on the cost benefits of taking credit cards and PCI compliance. He summarizes it as follows:
I suspect the cost of implementing PCI controls will far outweigh the potential profit of taking credit card numbers and storing them, even if you already have many of the safeguards in place.
Are credit cards worth the risk? | Network Security Blog

No comments: