If you're not actively logging and auditing all SELECT * queries on tables storing credit card numbers... shame on you.