What are Squirrel Systems responsibilities when one of its customers has been designated a CPP?
Squirrel Systems is not a QSA and is not qualified to conduct an investigation in the event of a compromise. However, Squirrel Systems can answer technical questions about its products for the law enforcer or QSA as part of the forensic report. Squirrel Systems is not responsible to pay the customers penalties, charge backs, or fines in the event of a compromise. The Merchant is responsible to pay the penalties, charge backs and fines as a result of failing to be PCI-DSS compliant.