Advice For POS VARs Taking The PCI QIR Certification Exam

By Ray Moorman, director of product management, Vantiv Integrated Payments (formerly Mercury Payment Systems)

Originally launched in 2012 by the Payment Card Industry Security Standards Council (PCI SSC), the Qualified Integrated Reseller (QIR) certification program was designed to help address the security challenges resulting from a third party’s involvement in the payment processing environment. At the time, it was reported 76 percent of data breaches resulted from security vulnerabilities introduced by a third party responsible for system support, development, and/or maintenance of business environments.¹

Through the PCI QIR program, payment application integrators and value added resellers (VARs) have the opportunity to receive specialized training and certification on the secure installation of Payment Applications Data Security Standard (PA-DSS)-validated payment applications into merchant environments in a manner that facilitates PCI DSS compliance. Additionally, the PCI SSC maintains a global list of QIRs to help merchants locate PCI approved partners.²

The urgency for VARs to become QIR certified has increased due to a new deadline imposed by Visa. Effective January 31, 2017, acquirers must require Level 4 merchants who use a third party for POS application or terminal installation, integration or maintenance to use PCI-certified QIR professionals from the QIR Companies list to install and service POS applications and terminals. Let’s take a look at the advantages of becoming QIR certified, and how best to proceed. 

Please log in or register below to read the full article.