Businesses should take a disciplined approach to Web application security that focuses first on the most common security concerns. Payment processing companies need to ensure secure payments and make sure PCI guidelines are met EMV's are inherently secure, it will however take time for the system to mature. I work with McGladrey, readers of this article may find this infograph on The anatomy of a data breach interesting. bit.ly/mcgldrydatabreach