The security of a transaction-processing network varies inversely with the value the operators place in PCI.