QIRs are integrators and resellers specially trained by PCI Security Standards Council to address critical security controls while installing merchant payment systems. QIRs reduce merchant risk and mitigate the most common causes of payment data breaches by focusing on critical security controls.
Do I need a Qir?
According to Digital Transactions, 90% of card-accepting businesses in the US are Level 4 Merchants. If you're a Level 4 Merchant and use a POS provider to install your system or provide remote tech support, that company must be QIR certified.2020-04-06
How long must a Qir professional keep documented evidence of a qualified installation?
three (3) years
What document describes the steps and information needed to complete the Qir implementation statement?
QIR Implementation Instructions The then-current version guidance document provided by PCI SSC, that explains how to complete the QIR Implementation Statement and is available by PCI SSC on the Website.
How do you become a Qir?
QIR training candidate must have work experience in technology installation and system hardening. Candidate should have experience installing and configuring applications – preferably payment applications – equal to at least one year or three separate engagements.
What is a Qir in PCI?
Introduction. The Qualified Integrators and Resellers (QIR) Program outlines guiding principles and procedures for the secure installation and maintenance of payment applications in a merchant environment, in a manner that supports their PCI DSS compliance efforts.
Who is a qualified integrator & reseller?
A Qualified Integrator & Reseller (QIR) is an organization that is authorized by the PCI Security Standards Council to “implement, configure and/or support” PA-DSS payment applications. The PCI Council lists all QIRs on its website and the number of companies that are QIR Validated is growing very quickly.2016-05-04
What is the general responsibility of a Qir professional?
The QIR Professional must store the QIR Implementation Statement and any associated work papers for a minimum of three (3) years from the completion of the Qualified Installation. PCI SSC reserves the right to examine these documents upon reasonable notice as part of its quality assurance process.
Which document describes the steps and information needed to complete the Qir implementation statement?
QIR Implementation Instructions The then-current version guidance document provided by PCI SSC, that explains how to complete the QIR Implementation Statement and is available by PCI SSC on the Website.