I have noticed that there is a growing wave of discontent from the information security and compliance movement around complying with the PCI DSS.
Mobilizing the PCI Resistance: Lessons Learned From Fighting Prior Wars (SOX-404)