PCI:DSS Tier 1 is difficult to get and keep. But everyone here is missing the point of it, it's not to make sure you never get breached it's to ensure forensic

PCI:DSS Tier 1 is difficult to get and keep. But everyone here is missing the point of it, it's not to make sure you never get breached it's to ensure forensics exist that cannot be tampered with. Separation of concerns to keep any single party from within the company from doing anything fraudulent or for an attacker to cover any tracks. It's not intended at all to be any kind of security by itself outside of the damage an employee can do. Bad code exists and PCI will do nothing to prevent this, because that's not the purpose of the compliance.