Should InfoSec companies be betting on PCI ?

This piece critiques PCI DSS in the context of a U.S. congressional hearing, arguing the payment card industry shifts risk and compliance burdens to merchants, incentivizing checkbox compliance over real security. Citing the Heartland breach and the role of infosec vendors, it claims the current model is failing and predicts a necessary shift in the payment transaction model rather than continued reliance on compliance frameworks.