Would it make sense for some one to tell you a building was being kept secure from trespassers; yet, as you watched, over time, you didn't see anyone on foot patrolling the area (inside or out), did not see anyone watching monitors (where there even cameras monitoring areas?), there were no recordings from the monitors being kept for any period of time. How would you feel about the security of the building? Could the security team learn from break in attempts? Would the security team even know if there was a break in?
Are you involved in the PCI Compliance dance? Do you know your partners? Do you need a PCI Compliant hosting provider who takes the dance seriously? Who will hold your hand, and walk you through any difficult or tedious step?
If you are like me, you will be tweaking your Web site over time. Sometimes those tweaks will involving a site redesign, and sometimes it is just a matter of organizing your site better for search engine optimization -- SEO -- or making it easier for visitors to find a given page (the first choice of page name made sense at the time, but not now). How can you help those who bookmarked areas of your site as well as the search engines find the new pages?