[central_va]

She should of had “secret” staff dedicated to breaching security unknown to the actual IT department staff.

[Garth Tater]

"She should of had “secret” staff dedicated to breaching security unknown to the actual IT department staff."

They should have hired you.

[rarestia]

She should of had “secret” staff dedicated to breaching security unknown to the actual IT department staff.

This is known as black-box vulnerability assessment and is very common in many industries. I'm curious if Equifax was bound by PCI or regularly audited?

I work in financial services and we are audited by at least 3 different entities at least once per year by each, and for PCI, we are required to pass audit twice a year. If we don't pass audit, we lose a majority of our customer base. Not sure how Equifax got away with this.