At a minimum, cards should be issued to a specific person and immediately revoked when no longer authorized. If this infrastructure is in place, why should the

At a minimum, cards should be issued to a specific person and immediately revoked when no longer authorized. If this infrastructure is in place, why should the employer care? If it's not, then we're assuming a shared account, which increases the risk exposure for normal loss, theft, etc. by the number of people using that account. Can you afford to have your organization's payment ability severely hampered because a field rep got mugged?