Fork in the Road. Choosing the POS path that is right for your campus. Sequoia Retail Systems, Inc.



Similar documents
Credit Card Processing Overview

CardControl. Credit Card Processing 101. Overview. Contents

COMPARING CAMPUS CARD SYSTEM PROPOSALS P A T R I C I A G O E W E Y M A R I S T C O L L E G E

Flexible and secure. acceo tender retail. payment solution. tender-retail.acceo.com

How To Protect Your Data From Being Stolen

Point Secure Commerce Application (SCA) 2.x PCI PA-DSS Out of Scope White Paper

Williamson County Technology Services Technology Project Questionnaire for Vendor (To be filled out withprospective solution provider)

CPIM Academy. Cash 257 Merchant Services and Revenue Collection

Revenue Security and Efficiency

The Value of a Payment Gateway. White Paper

Tokenization Amplified XiIntercept. The ultimate PCI DSS cost & scope reduction mechanism

PCI PA - DSS. Point ipos Implementation Guide. Version VeriFone Vx820 using the Point ipos Payment Core

Client Security Risk Assessment Questionnaire

Increase Efficiency, Maximize Profits, and Secure Guest Confidence.

Ruby VASC Instructor Guide

Transformation of POS Operations at

PCI PA - DSS. Point BKX Implementation Guide. Version Atos Xenta, Atos Xenteo and Atos Yomani using the Point BKX Payment Core

Bama Bound: Online Photo Submission. Jeanine Brooks & Lindsey Howard The University of Alabama

PCI DSS 101 FOR CTOs AND BUSINESS EXECUTIVES

E-Market Policy Accepting Online Payment for Conducting University Business

VERIFONE PAYWARE SOLUTIONS

Encryption and Tokenization: Protecting Customer Data. Your Payments Universally Amplified. Tia D. Ilori Sue Zloth September 18, 2013

EMV's Role in reducing Payment Risks: a Multi-Layered Approach

This policy applies to all GPC units that process, transmit, or handle cardholder information in a physical or electronic format.

CREDIT CARD PROCESSING POLICY AND PROCEDURES

PCI-DSS: A Step-by-Step Payment Card Security Approach. Amy Mushahwar & Mason Weisz

Time to Value: Successful Cloud Software Implementation

PCI Compliance Workshop. NACS PEI October 21, :45 a.m. 11:45 a.m.

Payment Card Industry (PCI) Data Security Standard

Qualified Integrators and Resellers (QIR) Implementation Statement

PCI PA - DSS. Point XSA Implementation Guide. Atos Worldline Banksys XENTA SA. Version 1.00

EMV Delivery of Mobile, Parking and Unattended Payments. Elavon

Essex County College INFORMATION TECHNOLOGY MASTER PLAN

Universal Transaction Gateway (UTG ), 4Go, and i4go are covered by

SCOPE OF WORK AND TECHNICAL SPECIFICATIONS

EMV and Restaurants: What you need to know. Mike English. October Executive Director, Product Development Heartland Payment Systems

Information Technology

Data Security Basics for Small Merchants

NCR Secure Pay FAQ Updated June 12, 2014

POSitive Retail Manager Installation Guide

paypoint implementation guide

COLUMBUS STATE COMMUNITY COLLEGE POLICY AND PROCEDURES MANUAL

PCI DSS Presentation University of Cincinnati

Transitions in Payments: PCI Compliance, EMV & True Transactions Security

Version 7.4 & higher is Critical for all Customers Processing Credit Cards!

PCI DSS FAQ. The twelve requirements of the PCI DSS are defined as follows:

CREDIT CARD MERCHANT PROCEDURES MANUAL. Effective Date: 5/25/2011

The Comprehensive, Yet Concise Guide to Credit Card Processing

bid every 10 years Are there specific pain points or issues with your current processor you are trying to resolve by going out for RFP?

And Take a Step on the IG Career Path

WineWeb: Point-of-Sale Planning Guide

Hybrid PA-DSS Report on Validation

Oracle POS (360 Commerce) integration with EBS A solution for Transit Agencies

PayLeap Guide. One Stop

Table of Contents. BAR CODES Entering Bar Codes within EBMS Bar codes for inventory items Scanning Bar Codes...

The Petroleum Marketer s PCI compliance Reference Guide

Payment Card Industry Compliance

TREASURER S OFFICE ADMINISTRATIVE STANDARDS FOR THE TREASURER S FISCAL PROCEDURE No MERCHANT DEBIT AND CREDIT CARD RECEIPTS

Puzzled about PCI compliance? Proactive ways to navigate through the standard for compliance

ACQUIRER OR ACQUIRING BANK A financial institution (often a bank) where a merchant has an account to process transactions and card payments

The Phoenix Group PAYware Mobile Solution Overview

Solutions For Higher Education: Reducing Compliance Scope Across Campus With PCI Validated P2PE

Optimizing the Payment Process in SAP

We believe First Data is well positioned to take advantage of all of these trends given the breadth of our solutions and our global operating

Payments simplified. 1

Payment Card Industry (PCI) Data Security Standard

Three Critical Success Factors for PCI Assessment. Seth Peter NetSPI April 21, 2010

NCR CONNECTED PAYMENTS

Are You Ready For PCI v 3.0. Speaker: Corbin DelCarlo Institution: McGladrey LLP Date: October 6, 2014

Cisco Comprehensive Payments Solution

Steps for staying PCI DSS compliant Visa Account Information Security Guide October 2009

Policies and Procedures. Merchant Card Services Office of Treasury Operations

Your gateway to card acceptance.

VESTA CORPORATION WHITEPAPER Payment Card Industry Data Security Standards (PCI DSS) and Mobile Operators: Trends and Implications

A Whitepaper by Vesta Corporation. Payment Card Industry Data Security Standards (PCI DSS) and Mobile Operators: Trends and Implications

PCI General Policy. Effective Date: August Approval: December 17, Maintenance of Policy: Office of Student Accounts REFERENCE DOCUMENTS:

First Data takes you beyond with Terminals and Point-of-Sale (POS) solutions designed to support evolving customer payment preferences.

VeriFone VeriShield Total Protect Technical Assessment White Paper

reseller program 800.POS

Credential and Workflow Design with TruCredential. DataCard Corporation. All rights reserved.

Merchant Payment Solutions

CREDIT CARD MERCHANT POLICY. All campuses served by Louisiana State University (LSU) Office of Accounting Services

Payment Card Industry (PCI) Data Security Standard

Sage ERP MAS I White Paper. Payment Processing Trends, Tips, and Tricks: What You Need to Know

11/24/2014. PCI Compliance: Major Changes in e-quantum/quantum Net

Transcription:

Fork in the Road Choosing the POS path that is right for your campus Sequoia Retail Systems, Inc.

On Premise or Hosted Point of Sale? 2

Presenters 3 Jeanine Brooks Director Action Card Jessica Bender Manager, Auxiliary Services & College Card

Presenters 4 Brian Hendrix Product Manager Jonathan Rollman Product Manager

Agenda 5 Introduction to Sequoia QuadPoint POS On Premise Installation Story Jeanine Brooks University of Alabama Hosted Installation Story Jessica Bender Palm Beach State College On Premise vs. Hosted Review Q & A

QuadPoint Suite of Applications The only fully integrated point-of-sale solution designed exclusively for the Higher Education market 6

QuadPoint POS Solution 7 Flexible and scalable for use in various operations Dining Operations Concessions Convenience Stores Copy Centers Small Retail Outlets

Campus Card Integration 8 Real-time campus card transaction processing Encrypted data transmission On-Line & Off-Line transaction processing capabilities

PCI Compliance & Validation 9 All Sequoia applications that accept credit cards are PCI compliant All on premise applications are PA-DSS validated All QuadPoint Hosted applications are PCI DSS validated Sequoia s system architecture greatly limits PCI compliance burden

Point-to-Point Encryption (P2PE) 10 VeriShield Protect Point-to-Point Encryption and Tokenization Reduce PCI-DSS exposure Encrypts cardholder data at the card swipe and protects it throughout the transaction Currently supported with the VeriFone MX-915 and MX-925

QuadPoint Hosted Environment 11 Hosted at Sungard collocation facility Virtualized environment Load Balancer for Web and QuadPoint services Separate Reporting database instance High Availability Infrastructure 2.2M+ transactions per year $160M+ per year Average of ~67 hits/s equals ~2.1B hits/year

12 On Premise Installation at the University of Alabama

UA: Background 13 Public Institution Located in Tuscaloosa, AL 34,582 Student Enrollment 6,000 Faculty/Staff

UA: Background 14 $14 million Dining Dollars Required for undergraduates 9+ hours $300 Fall/Spring, $100 Summer 8900 Student Meal Plans/Term First Year Experience-All Access $6 million Bama Cash Optional debit account

UA POS: Implementation Team 15 Action Card Information Technology Enterprise Development Enterprise Technology Project Manager UA Food Service Contracted Vendor- Aramark Sequoia Project Manager Bb Project Manager

UA POS: QuadPoint Server 16 Virtual server support Easy to create on premise Virtual Server Specs 16GB RAM 2 Quad-core AMD Opteron Processors E Drive 60GB Storage

UA POS: QuadPoint Install 17 20 Profit Centers 46 Registers Peripherals include printers, kitchen printers, barcode scanners 46 MX915 P2PE Credit Enabled Devices

18

UA POS: Disaster Preparedness 19 Highlights Off-Site UA Disaster Recovery facility in Atlanta Successful Production Switchover to Disaster Recovery site for verification in December 2013 Disaster Recovery Server live in Atlanta in 30 minutes

UA POS: Disaster Preparedness 20 Switchover Steps Snapshot the UA QuadPoint server Take down the UA QuadPoint server Bring up the DR QuadPoint server using the snapshot Verify the IP is correct and spanned Verify services are up and started correctly

UA POS: Disaster Preparedness 21 Verification Steps Test transactions POS: Meal plans, Bama Cash, Dining Dollars, Conference Dollars, Credit Card, and Balance Inquiry Kiosk: Deposit on new card/existing card, Balance Inquiry, and eaccounts Handhelds: card swipe TIA Transaction: Host Monitor and Transact report QuadPoint Reporting: Manual/Scheduled reports

UA POS: Disaster Preparedness 22 Switchback Steps Snapshot the DR QuadPoint server Take down the DR QuadPoint server Bring up the UA QuadPoint server using the snapshot Verify the IP is correct and spanned Verify services are up and started correctly Repeat Verification Steps

UA POS: On Premise Server Selected 23 Strong IT team support on campus High Availability / Disaster Recovery Campus Virtual server support made for easy installation Flexibility to go hosted at a future date

24 Hosted Installation at Palm Beach State College

PBSC: Background 25 Florida s First Community College Palm Beach County 4 Campuses (5 th campus in future) 47,000+ Students (credit & noncredit) 2,400 + FT/PT Employees 7 th largest of the 28 Colleges comprising the Florida College System 11th largest producer of Associate degrees in the country. Seventh lowest tuition in the nation among four-year public schools

PBSC: The PantherCard 26 All in one card program est. approx. Jan. 2004 195,000 + cards issued as of 12/1/2011 Mag Stripe Cards Student/Staff Identification Library Card Declining Balance Printing/Copying Bookstore and Cafeteria Access to lab spaces (homegrown app) Financial Aid Atrium Campus Card System

PBSC: PantherCard Statistics (2013) 27 12,000+ Financial Aid Transactions per Term ($1.7M+) 390,000+ Print/copy Swipes (approx. $136K) 8,000+ Online card deposits (approx. $153K) 15,000 Cafeteria Swipes (approx. $58K) 4,200+ Bookstore Swipes (approx. $63K)* 50,000+ kiosk deposits (approx. $135k) Approx. $304K total deposits *Not including financial aid transactions

PBSC: Organizational Structure 28 Board of Trustees President VP, Administration & Business Svcs Controller Mgr. Auxiliary Svcs & College Card FT Office Rep Student Workers (6) IT Support Aux. Vendors

PBSC POS: Implementation Path 29 Set Goals Research Decision Implement

PBSC POS: Implementation Goals 30 True POS Solution Existing café running with old cash registers Contracted café mgmt, POS owned by College Global management/price changes

PBSC POS: Implementation Goals 31 Flexibility between campus card platforms Open to potential provider changes Accept PantherCard at all locations PCI Compliance Service from Provider

PBSC POS: Implementation Research & Decision 32 Narrowed to 2 possible solutions NACCU Member research Provided Specs to Campus IT Determined that on-site server support was not readily available Point to Point Encryption was appealing Hosted solution met all criteria

PBSC POS: Hosted Server Selected 33 Less up front cost on initial purchase No replacement / expansion costs for server hardware Limited IT support on campus < ½ time IT support person for office No access to current servers permitted to card office staff Minimize PCI efforts Centrally managed updates, patches, etc. HA/DR is handled by Sequoia

PBSC POS: QuadPoint Install 34 Phase 1 4 Campuses 6 Profit Centers 6 Registers Phase 2 4 IBM POS 2 Protech 6 MX915 P2P Credit 11 Kiosks

35 On Premise vs. Hosted

Pros of a On Premise POS Server 36 Direct access to database tables Allows complete control of entire POS ecosystem Manage firewall rules for the POS server Upgrade on your schedule No reliance on the Internet for connectivity to the server Internally managed HA / DR

Pros of a Hosted POS Server 37 Eliminate capital expenditures for servers & IT infrastructure Decrease compliance expenses Reduced IT staff involvement Software upgrades are automatic

Pros of a Hosted POS Server 38

Pros of a Hosted POS Server 39 Vendor-managed HA/DR PCI compliant hosting environment Access software via desktop web browsers

Sequoia: Bringing the Platforms Together 40 Back Office client Web client developed for Hosted New standard for on premise Networking No incoming ports for POS network Reporting Migrated Crystal initially Moving to web reporting Server Architecture Distributed components

Sequoia: Bringing the Platforms Together 41 Easier to support for both Sequoia and customer Standardized software features and workflows One type of architecture Easier migration

42