. "Industry and regulatory standards such as PCI and SOX, and best security practice changes all that." . . . . . .