Confirm the requirement with QuickBooks support (what I did).  SecurityMetrics is trying to scare you into something you don't need, because they need to make money to stay in business.

Bottom line, if you do not handle credit card information from your customers, you don't need their product.