content: Basically, I used to work in the payment processing industry the security requirements were massive. 1\ monthly penetration testing. 2\ Quarterly or yearly audits from a PCI DSS Auditor, make HIPAA audits look like a cakewalk. 3\ one fuckup = corporate suicide.