Spot on.
You are very correct when you say "perform stringent due diligence" and " a more secure IT environment is likely to result in a lower premium."
Chubbs review made ePCI compliance look like childs play.
We were told they would not secure a weak network because companies could not afford the premiums.
It is a much more comprehensive security standard you must meet.