Editor’s Note: This blog entry was originally published on June 14, 2017, and was updated on December 16, 2019.
What is a QIR?
Over recent years, many investigations have determined that one leading cause of payment data breaches is poor installation and/or maintenance of payment systems. On January 31, 2017, Visa officially began requiring acquirers to “ensure that Level 4 merchants using third parties for POS application and terminal installation and integration engage only PCI QIR professionals.”
This means those merchants must use a professional who is certified by the PCI Security Standards Council as a Qualified Integrator and Reseller (QIR) to install, integrate, and support terminals and point-of-sale applications. The goal of this requirement was to increase payment security and to help to better prevent data breaches caused by poor PCI compliance practices.
The PCI Security Standards Council has a program for those seeking to be certified as QIRs. These security professionals are trained and certified to install and maintain PA-DSS validated payment applications. QIRs must be re-certified each year, and the Council maintains an updated QIR list.
Merchants using QIR certified professionals can be confident that their payment applications and terminals are installed and integrated in a matter that mitigates payment data breaches and complies with PCI-DSS requirements.
How to Become a QIR
The PCI Security Standards Council offers a Qualified Integrators and Resellers (QIR) Program. Candidates for this training program must meet certain requirements, including work experience in technology installation and system hardening. Approved applicants are required to take a training course and then pass an exam.
OpenEdge’s QIR Solutions
OpenEdge has QIR solutions to help you navigate these requirements, whether you need access to certified installers or you plan to get your own staff certified.
OpenEdge: QIR Certified
The security experts at OpenEdge have achieved QIR certification and can ensure your small business merchants are using payment applications installed and serviced in accordance with PCI standards.
Get Certified: QIR ASSIST
For developers who wish to pursue QIR certification, OpenEdge offers QIR ASSIST, a support program to get your staff certified and ensure you have access to payments security best practices.
QIR ASSIST offers our partners a training assistance program which outlines the guiding principles and procedures relative to the secure installation, configuration and maintenance of payment applications in a manner that supports merchant compliance and validation of PCI DSS.
The OpenEdge Experts QIR ASSIST Program aids our ISV partners in closing any gaps in the prerequisite knowledge necessary to successfully complete the formal path to becoming a certified QIR company. Partners will receive specialized training on guidelines for implementing and maintaining payment applications.
QIR ASSIST includes:
Consultation with PCI security experts
Education on topics such as: secure remote access, malware prevention, encryption and tokenization
QIR exam preparation
Post-certification marketing assistance to promote your new status as a Qualified Integrator and Reseller
Whether you choose to use one of OpenEdge’s QIR-certified security experts, or you wish to get your own staff certified with the help of our QIR ASSIST program, contact us today to ensure the installation, implementation, and support of your payment system is handled by a Qualified Integrator and Reseller.