To many smaller merchants, outsourcing may not be an option. I'd suggest reading and understanding the PCI-DSS. While it may be a bit over-written and mundane, its good knowledge that can save a small, medium, or even large sized business owner a lot of Money.

Get more information on PCI-DSS here: https://www.pcisecuritystandards.org