I believe that PCI compliance in the US requires that background checks be run on employees with access to the protected environment. I also believe that that i

I believe that PCI compliance in the US requires that background checks be run on employees with access to the protected environment. I also believe that that is the only requirement: Run a background check. They don't say you have to do anything with it, or even read the thing when it comes back. A old cow-orker of mine had a bullshit felony for "computer hacking" from quite a while ago. Trust was never an issue with this person.