Organizations that wait for industry security standards to fully mature or for a breach to force their hand will find themselves at a disadvantage with regulators, customers and insurers.
The brands that will manage this period well are the ones that understand, order by order, what their true landed cost and repayment timeline look like.