I'm still interested in receiving answers to the "specific" questions I asked above.  The resources listed by QB do not actually answer my questions.   Telling me that it's "Still a good idea" to purchase a plan, does not tell me what the plan is actually going to do that with mitigate risk.  If however, what I'm being told is that the plan functions as a general PCI liability shield from, then ok, I guess.  But I would ask that I be told that and not the continued run around.  Please?