Re: Small shops with I.T?
Cry me a river. It's part of the cost of doing business. If a business can't afford it then the business can not afford to operate.
Yes, the vendors should be providing what security they can. But there will always be new exploits. So security requires a combination of the vendors and the businesses doing what they can. If they have no knowledge and aren't big enough to need to hire someone for the job, they pay a contractor. The business doesn't get to just say it's someone else's responsibility because they don't want to pay. If they don't budget for this then they better budget for negligence lawsuits and losing their ability to processes cards entirely.