Transact. publication for clients & partners. powering your e-payment program Volume 1 Number 4

Size: px
Start display at page:

Download "Transact. publication for clients & partners. powering your e-payment program Volume 1 Number 4"

Transcription

1 news publication for clients & partners a Transact powering your e-payment program Volume 1 Number 4 02 Colorado Division of Child Support Services Sees Steady Growth for their VPS Epayment Program 04 PowerPack 3.0 Ships to Clients The latest promo pack for all the ways you want to pay 05 Security Corner PCI-DSS - What is it, Why is it, and Why Should You Care? As a PCI Compliant Service Provider, VPS Has You Covered 07 Partner Profile Data Design, Inc. Newest Government Epayment Partner Covers Kentucky

2 Colorado Division of Child Support Services Sees Steady Growth for their VPS E-payment Program A VPS client since April of this year, the Colorado Division of Child Support Services ( began their search for an epayment partner in the summer of At the time, the VPS ChildSupportBillpay program had three clients. (Today there are 10 around the country.) At the time, says Colorado Child Support FSR Manager, Lexie C. Barath, many of the state Child Support agencies were in the same early stages of assessment for credit/debit card acceptance. Nonetheless, Colorado was able to call on people they knew at the State of Washington CS agency (a VPS early-adopter) and at the State of Indiana to discuss their programs. Indiana would become a model for the kind of performance Colorado wanted to see out of its e-payment program, says Barath. Since April, the number of payments has increased by 75% through September, and total dollars collected on behalf of Colorado has grown by 55%. We had set an ambitious goal for ourselves, based on program performance in Indiana, says Barath. At first glance, we thought we were falling short of expectations. But on second look, we realized that Indiana has twice the child support clients we have. Plus they had an epayment program in-place, and then switched to VPS, whereas we were just starting our program. Promoting End-of-March/early April, Colorado went live with its credit/debit card acceptance program with onsite promotions in 54 collections counties. (There are 64 counties in Colorado, but the smallest counties by population are served by neighboring counties.) The most effective promotional item so far has proven to be the business card handout, says Barath. A couple of counties have requested second printings of these cards. The cards are supported by posters, counter cards, and counter mats in the various county Child Support Enforcement (CSE) Units. In the first week of October, VPS and Colorado rolled out an innovative promotional program: Breast Cancer Awareness October. 2 VPS Newsletter Volume 1 Number x333 [email protected]

3 Employer Payment Portal Federal and state regulations require that when an Order/Notice to Withhold Income For Child Support is received, an employer must start withholding child support and send child support to, most usually, a spouse or former spouse in accordance with a strictly defined timeline. During the Breast Cancer Awareness October promotion, VPS donated $.50 per transaction made during the month to the Breast Cancer Research Foundation ( VPS developed an employer portal on the Colorado website that simplifies the transfer of support payments deducted directly from an employee s paycheck and sent to the beneficiary. The employer can manage all obligor employees from a single screen, adding or deleting names, and making all payments in a single transaction. Debit/Credit Convenience fees are identical for debit and credit card payment of child support, both onsite in collections offices and online, a fee structure adopted so as not to favor one means of payment over the other, says Barath. We re running about 50-50, debit to credit, which is within keeping of what we know from other VPS clients like Indiana. And whether payments come via the AutoPay option or sequentially repeated is not something Colorado tracks, though Barath figures that 20 30% of payments are recurring. Employer payment portal developed for childsupport.state.co.us. Using this newly developed program feature, employers can manage all obligor employees from a single screen, with the ability to add, edit and delete names and accounts. The employer selects which employees to make payments on behalf of. Once choices are set, all accounts are paid in a single action. For Barath, the most important figure is usage. A (weighted) comparison with the model, larger Indiana program with its sizable head start puts Colorado just about where it wants to be, with usage trending upward. VPS Newsletter Volume 1 Number x333 [email protected] 3

4 PowerPack 3.0 PowerPack 3.0 Ships to Clients The latest package of on-site/online, digital and print promotional tools in a variety for formats PowerPack 3.0 is aimed at increasing awareness of your VPS epayment program, and boosting usage. From posters and counter cards to flyers and blast template files, PowerPack 3.0 gives clients a full complement of promo items all packed (digitally speaking) on flash drive. The 3.0 mailer also contains samples of popular print promo items. Everything in 3.0 is themed around a tag line for all the ways you want to pay and keyed to mobility, customers increasing preference for on-the-go payment options. The message is: convenience in tax, bill, and fee payments. Convenience and ease-of-use. And speed. Call it, The War Against Stamps and Envelopes. Or not. In any case, increasing customer usage of the epayment option anywhere, anytime, from any device is what it s all about. Enjoy. PowerPack 3.0, no-cost to government promotional vehicles and campaigns coming to clients soon... in the mail! 4 VPS Newsletter Volume 1 Number x333 [email protected]

5 Security Corner PCI-DSS: What is it, Why is it, and Why Should You Care? By Joe Thomas, Director of Network Security, VPS Payment Card Industry Data Security Standards (PCI-DSS, for not-so-short) is a set of requirements technological safeguards to prevent credit card data theft that merchants accepting credit cards must implement. Who Says? The Payment Card Industry Security Standards Council (PCI SSC), an independent body formed by the major payment card brands (Visa, MasterCard, American Express, Discover and JCB) on December 15, These companies aligned their individual policies and nearly two years later released version 1.0 of PCI DSS. (The current version is 3.0. The new, revised version 3.1 includes some minor updates that do not have much of an impact on an organization s compliance.) Why Should You Care? All merchants who accept credit cards are responsible for complying with PCI-DSS. Merchants who contract with banks and credit card processors to use their services must certify that their businesses are PCI-DSS complaint. Merchants pay fines for PCI-DSS non-compliance. And they are contractually required to reimburse banks and credit card processors for any losses if their customers credit card data is stolen. VPS Has You Covered As a PCI Compliant Service Provider, VPS takes on the PCI compliance work for their clients. For those who accept in-office payments or want to pass credit card data to VPS for processing, the VPS team will advise and help with security best practices and PCI compliance. VPS Newsletter Volume 1 Number x333 [email protected] 5

6 How Do Merchants Become Compliant Merchants must first determine their required level of compliance, which is based on the amount or volume of transactions they process each year. To do this, they must select the Self-Assessment Questionnaire (or SAQ) that best fits how they accept payments point-of-sale, telephone, Internet and complete the form. The SAQ is a self-evaluation tool that determines the physical, technical, and administrative security controls the merchant must have in place to be considered compliant. Lastly, the merchant must partner with an Approved Scanning Vendor and scan their systems for vulnerabilities at least four times per year. The Easiest Way for Merchants to Become Compliant Minimizing the amount of credit card data that they transmit and store is the easiest way for merchants to be PCI complaint. Partners like VPS can help reduce the scope of PCI assessments by hosting the payment Web site and storing the payment data for merchants. This allows merchants to use shorter, simpler SAQs when assessing their organizations for compliance. 6 VPS Newsletter Volume 1 Number x333 [email protected]

7 Partner Profile Data Design, Inc. Newest Government Epayment Partner Covers Kentucky Data Design Inc. (Richmond, KY), Value Payment Systems newest epayments partner in the government space, has offered comprehensive software services to public agencies in Kentucky (plus system hardware, networking, and database development) since Property tax collections in Kentucky is handled by the various county Sherriff s offices, both on-site and (now) online. We have a presence in 90 of the 120 Sheriff s offices in the state, says Data Design s president, Richard Bendure. Just about half of those have installed our collections software, TaxMaster and TaxMaster.net. Every spring, we send out our Budget Planning Guide to each office. It s a check list of what services they might be interested in, says Bendure. We re in touch with our clients pretty much on a daily basis, so it s easy for us to track their responses. If we don t hear back, we give them a call. Before contracting with VPS in August of this year, Data Design worked with another epayment vendor. That program offering established a precedent for debit and credit card acceptance for tax payments. There was a fairly strong interest level from the individual offices for epayments services, and as expressed by the Sheriff s Association as well. Switching to VPS whom Data Design felt could provide a more stable service and improved support proved an easy transition. We have 8 to 10 clients ready to add epayments to their TaxMaster software on Nov. 1, says Bendure. Clancy, The Data Design Team Mascot. Clancy has been with the company since he was a puppy, starting as an unpaid intern, and rapidly moved up in the organization to occupy his present position. Data Design s Payment Portal The VPS program is completely integrated with TaxMaster. On-site, the taxpayer swipes a card and payment appears in TaxMaster. Credit and debit card payments are processed, and all data is web-ready for viewing on the county web sites. VPS Newsletter Volume 1 Number x333 [email protected] 7

WHITE PAPER. PCI Basics: What it Takes to Be Compliant

WHITE PAPER. PCI Basics: What it Takes to Be Compliant WHITE PAPER PCI Basics: What it Takes to Be Compliant Introduction A long-running worldwide advertising campaign by Visa states that the card is accepted everywhere you want to be. Unfortunately, and through

More information

TREASURER S OFFICE ADMINISTRATIVE STANDARDS FOR THE TREASURER S FISCAL PROCEDURE No. 08-01 MERCHANT DEBIT AND CREDIT CARD RECEIPTS

TREASURER S OFFICE ADMINISTRATIVE STANDARDS FOR THE TREASURER S FISCAL PROCEDURE No. 08-01 MERCHANT DEBIT AND CREDIT CARD RECEIPTS TREASURER S OFFICE ADMINISTRATIVE STANDARDS FOR THE TREASURER S FISCAL PROCEDURE No. 08-01 MERCHANT DEBIT AND CREDIT CARD RECEIPTS 1. Introduction Debit and Credit Card Receipt Standards apply to the administration

More information

A Compliance Overview for the Payment Card Industry (PCI)

A Compliance Overview for the Payment Card Industry (PCI) A Compliance Overview for the Payment Card Industry (PCI) Many organizations are aware of the Payment Card Industry (PCI) and PCI compliance but are unsure if they are doing everything necessary. This

More information

SECTION: SUBJECT: PCI-DSS General Guidelines and Procedures

SECTION: SUBJECT: PCI-DSS General Guidelines and Procedures 1. Introduction 1.1. Purpose and Background 1.2. Central Coordinator Contact 1.3. Payment Card Industry Data Security Standards (PCI-DSS) High Level Overview 2. PCI-DSS Guidelines - Division of Responsibilities

More information

Questions and Answers PCI Compliance (Updated May 23, 2014)

Questions and Answers PCI Compliance (Updated May 23, 2014) Questions and Answers PCI Compliance (Updated ) The Alberta government is working toward PCI compliance, an industry standard created by the credit card industry to improve cardholder data security. The

More information

POLICY & PROCEDURE DOCUMENT NUMBER: 3.3101. DIVISION: Finance & Administration. TITLE: Policy & Procedures for Credit Card Merchants

POLICY & PROCEDURE DOCUMENT NUMBER: 3.3101. DIVISION: Finance & Administration. TITLE: Policy & Procedures for Credit Card Merchants POLICY & PROCEDURE DOCUMENT NUMBER: 3.3101 DIVISION: Finance & Administration TITLE: Policy & Procedures for Credit Card Merchants DATE: October 24, 2011 Authorized by: K. Ann Mead, VP for Finance & Administration

More information

E Pay. A Case Study in PCI Compliance. Illinois State Treasurer. Dan Rutherford

E Pay. A Case Study in PCI Compliance. Illinois State Treasurer. Dan Rutherford E Pay A Case Study in PCI Compliance Illinois State Treasurer Dan Rutherford What is PCI? The Payment Card Industry s Data Security Standard states: PCI Data Security Requirements applies to all members,

More information

EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy )

EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy ) EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy ) Background Due to increased threat of identity theft, fraudulent credit card activity and other instances where cardholder

More information

Clark University's PCI Compliance Policy

Clark University's PCI Compliance Policy ï» Clark University's PCI Compliance Policy Who Should Read this Policy: All persons who have access to credit card information, including: Every employee that accesses handles or maintains credit card

More information

PCI Compliance Overview

PCI Compliance Overview PCI Compliance Overview 1 PCI DSS Payment Card Industry Data Security Standard Standard that is applied to: Merchants Service Providers (Banks, Third party vendors, gateways) Systems (Hardware, software)

More information

Payment Card Industry Data Security Standard

Payment Card Industry Data Security Standard Payment Card Industry Data Security Standard Abhinav Goyal, B.E.(Computer Science) MBA Finance Final Trimester Welingkar Institute of Management ISACA Bangalore chapter 13 th February 2010 Credit Card

More information

University of Oregon Policy Statement Development Form

University of Oregon Policy Statement Development Form University of Oregon Policy Statement Development Form Policy Title: Electronic Commerce Policy submitted by: Name: Mark McCulloch Phone: 541 346 6249 Email: [email protected] Organization: Business

More information

COLORADO STATE UNIVERSITY Financial Procedure Statements FPI 6-6

COLORADO STATE UNIVERSITY Financial Procedure Statements FPI 6-6 1. Procedure Title: PCI Compliance Program COLORADO STATE UNIVERSITY Financial Procedure Statements FPI 6-6 2. Procedure Purpose and Effect: All Colorado State University departments that accept credit/debit

More information

Section 3.9 PCI DSS Information Security Policy Issued: June 2016 Replaces: January 2015

Section 3.9 PCI DSS Information Security Policy Issued: June 2016 Replaces: January 2015 Section 3.9 PCI DSS Information Security Policy Issued: June 2016 Replaces: January 2015 I. PURPOSE The purpose of this policy is to establish guidelines for processing charges on Payment Cards to protect

More information

What a Processor Needs from a University to Validate Compliance

What a Processor Needs from a University to Validate Compliance What a Processor Needs from a University to Validate Compliance Lisa T. Conroy Merchant Compliance Manager Vantiv May 24, 2016 Disclosures The information included in this presentation is for information

More information

PCI DSS Compliance. 2015 Information Pack for Merchants

PCI DSS Compliance. 2015 Information Pack for Merchants PCI DSS Compliance 2015 Information Pack for Merchants This pack contains general information regarding PCI DSS compliance and does not take into account your business' particular requirements. ANZ recommends

More information

PCI Standards: A Banking Perspective

PCI Standards: A Banking Perspective Slide 1 PCI Standards: A Banking Perspective Bob Brown, CISSP Wachovia Corporate Information Security Slide 2 Agenda 1. Payment Card Initiative History 2. Description of the Industry 3. PCI-DSS Control

More information

University Policy Accepting Credit Cards to Conduct University Business

University Policy Accepting Credit Cards to Conduct University Business BROWN UNIVERSITY University Policy Accepting Credit Cards to Conduct University Business Purpose Brown University requires all departments that are involved with credit card handling to do so in compliance

More information

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program MERCHANTS Can Level 1 merchants currently use internal auditors to perform an onsite assessment? Yes. However, after June 30,

More information

PCI Compliance. Top 10 Questions & Answers

PCI Compliance. Top 10 Questions & Answers PCI Compliance Top 10 Questions & Answers 1. What is PCI Compliance and PCI DSS? 2. Who needs to follow the PCI Data Security Standard? 3. What happens if I don t comply? 4. What are the basic requirements

More information

Q: What is PCI? Q: To whom does PCI apply? Q: Where can I find the PCI Data Security Standards (PCI DSS)? Q: What are the PCI compliance deadlines?

Q: What is PCI? Q: To whom does PCI apply? Q: Where can I find the PCI Data Security Standards (PCI DSS)? Q: What are the PCI compliance deadlines? Q: What is PCI? A: The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store or transmit credit card information maintain

More information

Payment Card Industry Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) Frequently Asked Questions

Payment Card Industry Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) Frequently Asked Questions PCI/PA-DSS FAQs Payment Card Industry Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) Frequently Asked Questions What is PCI DSS? The Payment Card Industry Data

More information

1/18/10. Walt Conway. PCI DSS in Context. Some History The Digital Dozen Key Players Cardholder Data Outsourcing Conclusions. PCI in Higher Education

1/18/10. Walt Conway. PCI DSS in Context. Some History The Digital Dozen Key Players Cardholder Data Outsourcing Conclusions. PCI in Higher Education PCI in Higher Education Walter Conway, QSA 403 Labs, LLC Walt Conway PCI consultant, blogger, trainer, speaker, author Former Visa VP Help schools become PCI compliant Represent Higher Education at PCI

More information

IT Security Compliance PCI DSS FOR MERCHANTS THE PAYMENT CARD INDUSTRY DATE SECURITY STANDARD WHITE PAPER

IT Security Compliance PCI DSS FOR MERCHANTS THE PAYMENT CARD INDUSTRY DATE SECURITY STANDARD WHITE PAPER July 9 th, 2012 Prepared By: Mark Akins PCI QSA, CISSP, CISA WHITE PAPER IT Security Compliance PCI DSS FOR MERCHANTS THE PAYMENT CARD INDUSTRY DATE SECURITY STANDARD PCI DSS for Merchants The Payment

More information

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program MERCHANTS Can Level 1 merchants currently use internal auditors to perform an onsite assessment? Yes. However, after June 30,

More information

PCI DSS 101 FOR CTOs AND BUSINESS EXECUTIVES

PCI DSS 101 FOR CTOs AND BUSINESS EXECUTIVES PCI DSS 101 FOR CTOs AND BUSINESS EXECUTIVES CUTTING THROUGH THE COMPLEXITY AND CONFUSION Over the years, South African retailers have come under increased pressure to gain PCI DSS (Payment Card Industry

More information

Payment Processing considerations to comply with IRS and PCI-DSS regulations and policies

Payment Processing considerations to comply with IRS and PCI-DSS regulations and policies itransact Presents Payment Processing considerations to comply with IRS and PCI-DSS regulations and policies Learning Objectives At the end of this course you will be able to: Prepare for IRS 6050w and

More information

PAI Secure Program Guide

PAI Secure Program Guide PAI Secure Program Guide A complete guide to understanding the Payment Card Industry Data Security Requirements and utilizing the PAI Secure Program. Letter From the CEO Welcome to PAI Secure. As you

More information

A PCI Journey with Wichita State University

A PCI Journey with Wichita State University A PCI Journey with Wichita State University Blaine Linehan System Software Analyst III Financial Operations & Business Technology Division of Administration & Finance 1 Question #1 How many of you know

More information

Sales Rep Frequently Asked Questions

Sales Rep Frequently Asked Questions V 02.21.13 Sales Rep Frequently Asked Questions OMEGA Processing Data Protection Program February 2013 - Updated In response to a national rise in data breaches and system compromises, OMEGA Processing

More information

GRINNELL COLLEGE CREDIT CARD PROCESSING AND SECURITY POLICY

GRINNELL COLLEGE CREDIT CARD PROCESSING AND SECURITY POLICY GRINNELL COLLEGE CREDIT CARD PROCESSING AND SECURITY POLICY PURPOSE The Payment Card Industry Data Security Standard was established by the credit card industry in response to an increase in identify theft

More information

Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS)

Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS) Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS) What is PCI DSS? The 12 Requirements Becoming compliant with SaferPayments Understanding the jargon SaferPayments Be smart.

More information

Payment Card Industry Data Security Standard (PCI DSS) Q & A November 6, 2008

Payment Card Industry Data Security Standard (PCI DSS) Q & A November 6, 2008 Payment Card Industry Data Security Standard (PCI DSS) Q & A November 6, 2008 What is the PCI DSS? And what do the acronyms CISP, SDP, DSOP and DISC stand for? The PCI DSS is a set of comprehensive requirements

More information

Version 7.4 & higher is Critical for all Customers Processing Credit Cards!

Version 7.4 & higher is Critical for all Customers Processing Credit Cards! Version 7.4 & higher is Critical for all Customers Processing Credit Cards! Data Pro Accounting Software has met the latest credit card processing requirements with its release of Version 7.4 due to the

More information

The PCI DSS Compliance Guide For Small Business

The PCI DSS Compliance Guide For Small Business PCI DSS Compliance in a hosted infrastructure A Rackspace White Paper Spring 2010 Summary The Payment Card Industry Data Security Standard (PCI DSS) is a global information security standard defined by

More information

Your guide to the Payment Card Industry Data Security Standard (PCI DSS) Merchant Business Solutions. Version 5.0 (April 2011)

Your guide to the Payment Card Industry Data Security Standard (PCI DSS) Merchant Business Solutions. Version 5.0 (April 2011) Your guide to the Payment Card Industry Data Security Standard (PCI DSS) Merchant Business Solutions Version 5.0 (April 2011) Contents Contents...2 Introduction...3 What are the 12 key requirements of

More information

Saint Louis University Merchant Card Processing Policy & Procedures

Saint Louis University Merchant Card Processing Policy & Procedures Saint Louis University Merchant Card Processing Policy & Procedures Overview: Policies and procedures for processing credit card transactions and properly storing credit card data physically and electronically.

More information

PCI Security Compliance

PCI Security Compliance E N T E R P R I S E Enterprise Security Solutions PCI Security Compliance : What PCI security means for your business The Facts Comodo HackerGuardian TM PCI and the Online Merchant Overview The Payment

More information

The Cost of Payment Card Data Theft and Your Business. Aaron Lego Director of Business Development

The Cost of Payment Card Data Theft and Your Business. Aaron Lego Director of Business Development The Cost of Payment Card Data Theft and Your Business Aaron Lego Director of Business Development Presentation Agenda Items we will cover: 1. Background on Payment Card Industry Data Security Standards

More information

Tokenization Amplified XiIntercept. The ultimate PCI DSS cost & scope reduction mechanism

Tokenization Amplified XiIntercept. The ultimate PCI DSS cost & scope reduction mechanism Tokenization Amplified XiIntercept The ultimate PCI DSS cost & scope reduction mechanism Paymetric White Paper Tokenization Amplified XiIntercept 2 Table of Contents Executive Summary 3 PCI DSS 3 The PCI

More information

Complying with Payment Card Industry Data Security Standards (PCI DSS) Requirements. Approaches in Higher Education

Complying with Payment Card Industry Data Security Standards (PCI DSS) Requirements. Approaches in Higher Education September 28, 2010 Complying with Payment Card Industry Data Security Standards (PCI DSS) Requirements Approaches in Higher Education Dennis W. Reedy Managing Director, Treasury Operations Indiana University

More information

Comodo HackerGuardian. PCI Security Compliance The Facts. What PCI security means for your business

Comodo HackerGuardian. PCI Security Compliance The Facts. What PCI security means for your business Comodo HackerGuardian PCI Security Compliance The Facts What PCI security means for your business Overview The Payment Card Industry Data Security Standard (PCI DSS) is a set of 12 requirements intended

More information

Credit Card Processing 101

Credit Card Processing 101 Credit Card Processing 101 Customers have come to expect credit cards as a payment option. With ATM fees continuing to rise, some consumers may even exclusively choose to take their purchasing power to

More information

PCI Compliance Top 10 Questions and Answers

PCI Compliance Top 10 Questions and Answers Where every interaction matters. PCI Compliance Top 10 Questions and Answers White Paper October 2013 By: Peer 1 Hosting Product Team www.peer1.com Contents What is PCI Compliance and PCI DSS? 3 Who needs

More information

PCI Compliance: How to ensure customer cardholder data is handled with care

PCI Compliance: How to ensure customer cardholder data is handled with care PCI Compliance: How to ensure customer cardholder data is handled with care Choosing a safe payment process for your business Contents Contents 2 Executive Summary 3 PCI compliance and accreditation 4

More information

PCI Compliance at The University of South Carolina. Failure is not an option. Rick Lambert PMP University of South Carolina ricklambert@sc.

PCI Compliance at The University of South Carolina. Failure is not an option. Rick Lambert PMP University of South Carolina ricklambert@sc. PCI Compliance at The University of South Carolina Failure is not an option Rick Lambert PMP University of South Carolina [email protected] Payment Card Industry Data Security Standard (PCI DSS) Who Must

More information

New York University University Policies

New York University University Policies New York University University Policies Title: Payment Card Industry Data Security Standard Policy Effective Date: April 11, 2012 Supersedes: N/A Issuing Authority: Executive Vice President for Finance

More information

And Take a Step on the IG Career Path

And Take a Step on the IG Career Path How to Develop a PCI Compliance Program And Take a Step on the IG Career Path Andrew Altepeter Any organization that processes customer payment cards must comply with the Payment Card Industry s Data Security

More information

PROTECTION OF OUR MERCHANTS AND REFERRAL PARTNERS IS OUR FIRST CONCERN

PROTECTION OF OUR MERCHANTS AND REFERRAL PARTNERS IS OUR FIRST CONCERN PCI Q: What is PCI? A: The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store or transmit credit card information

More information

TNHFMA 2011 Fall Institute October 12, 2011 TAKING OUR CUSTOMERS BUSINESS FORWARD. The Cost of Payment Card Data Theft and Your Business

TNHFMA 2011 Fall Institute October 12, 2011 TAKING OUR CUSTOMERS BUSINESS FORWARD. The Cost of Payment Card Data Theft and Your Business TAKING OUR CUSTOMERS BUSINESS FORWARD The Cost of Payment Card Data Theft and Your Business Aaron Lego Director of Business Development Presentation Agenda Items we will cover: 1. Background on Payment

More information

June 19, 2013. Bobbi McCracken, Associate Vice Chancellor Financial Services. Subject: Internal Audit of PCI Compliance.

June 19, 2013. Bobbi McCracken, Associate Vice Chancellor Financial Services. Subject: Internal Audit of PCI Compliance. RIVERSIDE: AUDIT & ADVISORY SERVICES June 19, 2013 To: Bobbi McCracken, Associate Vice Chancellor Financial Services Subject: Internal Audit of PCI Compliance Ref: R2013-03 We have completed our audit

More information

RFP#15-20 EXHIBIT E MERCHANT SERVICES INFORMATION SHEET

RFP#15-20 EXHIBIT E MERCHANT SERVICES INFORMATION SHEET RFP#15-20 EXHIBIT E MERCHANT SERVICES INFORMATION SHEET A. Merchant Credit Card Processing 1. Describe your company s authorization method; list and describe alternative authorization methods. 2. What

More information

SecurityMetrics Introduction to PCI Compliance

SecurityMetrics Introduction to PCI Compliance SecurityMetrics Introduction to PCI Compliance Card Data Compromise What is a card data compromise? A card data compromise occurs when payment card information is stolen from a merchant. Some examples

More information

FAQ S: TRUSTWAVE TRUSTKEEPER PCI MANAGER

FAQ S: TRUSTWAVE TRUSTKEEPER PCI MANAGER FAQ S: TRUSTWAVE TRUSTKEEPER PCI MANAGER SAQ FAQ S Q: Should I complete the PCI Wizard or should I go straight to the PCI Forms? A: The PCI Wizard has been designed to simplify the self-assessment requirement

More information

Payment Methods. The cost of doing business. Michelle Powell - BASYS Processing, Inc.

Payment Methods. The cost of doing business. Michelle Powell - BASYS Processing, Inc. Payment Methods The cost of doing business Michelle Powell - BASYS Processing, Inc. You ve got to spend money, to make money Major Industry Topics Industry Process Flow PCI DSS Compliance Risks of Non-Compliance

More information

Registration and PCI DSS compliance validation

Registration and PCI DSS compliance validation Visa Europe A Guide for Third Party Agents Registration and PCI DSS compliance validation October 2015 Version 1.1 Visa Europe 2015 Contents 1 Introduction... 4 1.1 Definitions of Agents... 4 2 Registration

More information

* Any merchant that has suffered a hack that resulted in an account data compromise may be escalated to a higher validation level.

* Any merchant that has suffered a hack that resulted in an account data compromise may be escalated to a higher validation level. Q: What is PCI? A: The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store or transmit credit card information maintain

More information

Credit Card Handling Security Standards

Credit Card Handling Security Standards Credit Card Handling Security Standards Overview This document is intended to provide guidance to merchants (colleges, departments, auxiliary organizations or individuals) regarding the processing of charges

More information

The Comprehensive, Yet Concise Guide to Credit Card Processing

The Comprehensive, Yet Concise Guide to Credit Card Processing The Comprehensive, Yet Concise Guide to Credit Card Processing Written by David Rodwell CreditCardProcessing.net Terms of Use This ebook was created to provide educational information regarding payment

More information

Merchant guide to PCI DSS

Merchant guide to PCI DSS Merchant guide to PCI DSS Contents What is PCI DSS and why was it introduced?... 3 Who needs to become PCI DSS compliant?... 3 BOIPA Simple PCI DSS - 3 step approach to helping businesses... 3 What does

More information

How to read your statement basics IRS Reporting Early Termination Fees Contract Renewals Equipment Leases & Free Equipment PCI Compliance General

How to read your statement basics IRS Reporting Early Termination Fees Contract Renewals Equipment Leases & Free Equipment PCI Compliance General 2 How to read your statement basics IRS Reporting Early Termination Fees Contract Renewals Equipment Leases & Free Equipment PCI Compliance General info Q&A 3 Calculate your Effective Rate Total Processing

More information

SecurityMetrics. PCI Starter Kit

SecurityMetrics. PCI Starter Kit SecurityMetrics PCI Starter Kit Orbis Payment Services, Inc. 42 Digital Drive, Suite 1 Novato, CA 94949 USA Dear Merchant, Thank you for your interest in Orbis Payment Services as your merchant service

More information

Leveraging the State s Credit & Debit Card Payment Processing QPA

Leveraging the State s Credit & Debit Card Payment Processing QPA Leveraging the State s Credit & Debit Card Payment Processing QPA CONTENTS The Rush to E-Payments About Us Market Segments We Serve Our Services Payment Channels Convenience Fee v. Merchant Funding Our

More information

PCI DSS. Payment Card Industry Data Security Standard. www.tuv.com/id

PCI DSS. Payment Card Industry Data Security Standard. www.tuv.com/id PCI DSS Payment Card Industry Data Security Standard www.tuv.com/id What Is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is the common security standard of all major credit cards brands.the

More information

Merchant Card Processing Request Form

Merchant Card Processing Request Form Merchant Card Processing Request Form This form must be filled out and approved before accepting credit card payments at any new location or via any website. of Application: Type of Request: e-commerce

More information

See page 16. Thomas A. Vallas

See page 16. Thomas A. Vallas Compliance TODAY July 2014 a publication of the health care compliance association www.hcca-info.org What s the key to successfully merging two large hospital systems? an interview with Michael R. Holper

More information

Kim Decarolis Compliance and Security Specialist [email protected] (248) 447-4073. Mark Wayne Vice President Compliance and Security Specialist

Kim Decarolis Compliance and Security Specialist decarolisk@anx.com (248) 447-4073. Mark Wayne Vice President Compliance and Security Specialist Target, Starbucks, Neiman Marcus Will your pharmacy be the next data breach victim? Kim Decarolis Compliance and Security Specialist [email protected] (248) 447-4073 Mark Wayne Vice President Compliance

More information

La règlementation VisaCard, MasterCard PCI-DSS

La règlementation VisaCard, MasterCard PCI-DSS La règlementation VisaCard, MasterCard PCI-DSS Conférence CLUSIF "LES RSSI FACE À L ÉVOLUTION DE LA RÉGLEMENTATION" 7 novembre 07 Serge Saghroune Overview of PCI DSS Payment Card Industry Data Security

More information

University of Virginia Credit Card Requirements

University of Virginia Credit Card Requirements University of Virginia Credit Card Requirements The University of Virginia recognizes that e-commerce is critical for the efficient operation of the University, and in particular for collecting revenue.

More information

Cyber Security: Secure Credit Card Payment Process Payment Card Industry Standard Compliance

Cyber Security: Secure Credit Card Payment Process Payment Card Industry Standard Compliance Cyber Security: Secure Credit Card Payment Process Payment Card Industry Standard Compliance A Non-Technical Guide Essential for Business Managers Office Managers Operations Managers Compliant? Bank Name

More information

PCI Data Security Standards

PCI Data Security Standards PCI Data Security Standards An Introduction to Bankcard Data Security Why should we worry? Since 2005, over 500 million customer records have been reported as lost or stolen 1 In 2010 alone, over 134 million

More information

CREDIT CARD MERCHANT PROCEDURES MANUAL. Effective Date: 5/25/2011

CREDIT CARD MERCHANT PROCEDURES MANUAL. Effective Date: 5/25/2011 CREDIT CARD MERCHANT PROCEDURES MANUAL Effective Date: 5/25/2011 Updated: May 25, 2011 TABLE OF CONTENTS Introduction... 1 Third-Party Vendors... 1 Merchant Account Set-up... 2 Personnel Requirements...

More information

This appendix is a supplement to the Local Government Information Security: Getting Started Guide, a non-technical reference essential for elected

This appendix is a supplement to the Local Government Information Security: Getting Started Guide, a non-technical reference essential for elected This appendix is a supplement to the Local Government Information Security: Getting Started Guide, a non-technical reference essential for elected officials, administrative officials and business managers.

More information

How To Protect Your Business From A Hacker Attack

How To Protect Your Business From A Hacker Attack Payment Card Industry Data Security Standards The payment card industry data security standard PCI DSS Visa and MasterCard have developed the Payment Card Industry Data Security Standard or PCI DSS as

More information

Third Party Agent Registration and PCI DSS Compliance Validation Guide

Third Party Agent Registration and PCI DSS Compliance Validation Guide Visa Europe Third Party Agent Registration and PCI DSS Compliance Validation Guide May 2016 Version 1.3 Visa Europe 2015 Contents 1 Introduction... 4 1.1 Definitions of Agents... 4 2 Registration Process...

More information

Merchant Services Tool Kit TEXPO 2013

Merchant Services Tool Kit TEXPO 2013 Merchant Services Tool Kit TEXPO 2013 Surcharges Visa Information Website Site Preview and PDF s: www.visa.com/merchantsurcharging Materials Notification of Intent to Surcharge Merchants who choose to

More information

Validation of PCI Compliance Requirements NC Office of the State Controller June 23, 2015

Validation of PCI Compliance Requirements NC Office of the State Controller June 23, 2015 Validation of PCI Compliance Requirements NC Office of the State Controller June 23, 2015 Purpose The purpose of this document is to provide instructions to entities that subscribe to merchant cards processing

More information