The PCI DSS self-assessment questionnaire can be challenging for non-technical people, especially when you don’t understand the different terms floating around inside it. “Qualified Integrator and Reseller” is one of those terms that is known to throw merchants for a loop.
The PCI DSS question is: Does your company use a Qualified Integrator and Reseller? Of course, the average person doesn’t know what in the world that is or how to even know if their company uses one or not!
So what is a Qualified Integrator and Reseller?
"A Qualified Integrator and Reseller, or QIR, has been specially trained and approved by the PCI Security Standards Council (SSC) to support a secure payment environment. Merchants that use a non-QIR to implement, configure, and/or support their integrated payment systems or applications cannot be assured that the outcome is secure or even PCI compliant."
A QIR, then, is an organization that the PCI Security Standards Council has approved to work with your business’s POS and payment applications.
Is your vendor a QIR?
You want to be able select “yes” to the QIR question on the PCI questionnaire. The good news is that there is a simple way to check and see if your vendor is a QIR, or to find a QIR for your business.
The video below walks you through how to navigate the PCI SSC website and find your QIR. It also shares additional reasons you don’t want to operate without one.
Want to learn more about payment security and compliance for your business? Contact Us. We’d be happy to help.
-attack.png)
