In my experience the overwhelming majority of process introduced in the name of PCI compliance are not actually required by any of the documentation. Whether y

In my experience the overwhelming majority of process introduced in the name of PCI compliance are not actually required by any of the documentation. Whether you can find an auditor that will let you get away with merely following the rules is another matter.