When retailers indication a agreement which has a payment processor, they agree to be topic to fines whenever they fail to take care of PCI DSS compliance. Large-volume people will would like to secure the services of a QSA who's registered to function in areas in which you are operating. https://www.nathanlabsadvisory.com/blog/tag/risk-assessment/