We use myvirtualmerchant.com (previously Converge, owned by Elavon) to process payments in our doctor's office.
Recently, they emailed us that we have to fulfill their partner company's (Trustwave TrustKeeper) list of PCI requisites, or else suffer hefty fees. This is what a first scan shows of our Office IP:
We have a new modem supplied by Comcast.
The confusion that I'm having is in trying to understand why any of this falls on us?