QIR (Qualified Integrator and Reseller)
PCIComplianceHubLast updated
A company trained and qualified by the PCI Security Standards Council to install and maintain payment systems for merchants. QIR training targets the configuration mistakes that most often cause card data breaches at smaller merchants: vendor default credentials left in place, insecure remote access, unnecessary services left enabled, and payment applications deployed outside their validated configuration. Qualification is held at company level through named trained employees and must be renewed each year. The program exists for merchants who depend on an integrator or reseller rather than running a security function of their own, and some acquirers require a QIR for payment system installations.