- Appoint a PCI Coordinator – the primary department contact for payment card activity and compliance.
- Training
- Coordinator
- Front-line employees
- IT Security Awareness Tutorial (ITSA) for ALL staff, faculty, and employees
- Documentation
- Desktop Procedures
- Equipment Inventory
- Confidentiality Agreements
- SAQ/Attestation of Compliance
- UVA Supplement
- Security Review w/ department IT professional
- Website
- Swipe or cellular terminals
- Wireless access points
- Fax machines
- Document Third-Party Providers and POS vendors compliance
- o Annual Compliance Documents verification
- AOC (Attestation of Compliance) or ROC (Report of Compliance) from your vendor.
- Payment card transaction flow diagram.
- o Annual Compliance Documents verification
- Other Resources
- Collab
- CampusGuard