How about a little breach forgiveness?
If your business is classified as PCI Level-3 (20,000-1,000,000 ecommerce transactions or 1,000,000 total transactions annually) or PCI Level-4 (fewer than 20,000 ecommerce transactions or less than 1,000,000 total transactions annually), you are protected with PCI Plus.
In fact, if you suffer a data breach at the hands of cybercriminals, you will not be subject to a reimbursement of expenditures unless the amount exceeds $100,000.