We are  a 2 hotel and 3 restaurant group and use roommaster as our PMS.
We are with cardnet and have the PCI requirement at SAQ C. 77 rooms about 11 million turnover

We have just had a PCI audit and they have said in order for us to be compliant we have ot have monitoring of intrusions etc of our network which will cost £2000  amonth.
This will be ongoing with 3 monthly penetration tests and also keeping the standards.
The initial cost to get us PCI compliant will be around £30K for the PCI company and then our IT support will charge us around the same to set all the systems up.
These sort of costs make us becoming compliant almost prohibitive and I was wondering if anyone else was facing this sort of challenge?