PCI compliance and POS software

[helenp]

Our pos software vendor has not yet released all the components required to enable PCI compliance on our POS. Even when it all has been released we still have to upgrade and reaccredit our solution which will take some time so we will not be compliant by the deadline. Do I assume in this situation that we are liable, not our software vendors, for lack of compliance?

Thanks

[wconway]

I don't know about "liable," but it sounds like you definitely will not be in compliance. If you can, check out the PABP on Visa's website for compliant POS vendors and apps. BTW, in terms of PCI DSS, outsourcing an app can aid PCI compliance, but you, the merchant, are still responsible for everything.

Walt