What happens if I'm using a PA-DSS validated payment application that is breached?
FAQ Response
Events such as these should be accounted for in any service contract you sign with a software vendor. The Council requires that approved PA-QSAs carry appropriate liability insurance.