I would daily compare the file running on the website that I deployed matched the file on the server verbatim. I think this would have been enough with BA. Sec

I would daily compare the file running on the website that I deployed matched the file on the server verbatim. I think this would have been enough with BA. Secondly I would run a daily test in production which verifies the requests the browser makes match those expected. This would only need doing on the pages which capture payment information. Neither solution is particularly difficult. BA clearly did nothing. Hence the negligence and huge fine.