Visa USA has released a best practices document for Payment Applications

As part of their due diligence, acquirers, merchants and agents should ensure that the payment application companies they use have passed a rigor of mature software processes including the Visa Top Ten Best Practices for Payment Application Companies, Version 1.0.

The top two problems are insecure remote access and vendor defaults.