What does PCI compliance mean at the University?

 

  • Appoint a PCI Coordinator – the primary department contact for payment card activity and compliance.
  • Training
    • Coordinator
    • Front-line employees
    • IT Security Awareness Tutorial (ITSA) for ALL staff, faculty, and employees
  • Documentation
    • Desktop Procedures
    • Equipment Inventory
    • Confidentiality Agreements
    • SAQ/Attestation of Compliance
    • UVA Supplement
  • Security Review w/ department IT professional
    • Website
    • Swipe or cellular terminals
    • Wireless access points
    • Fax machines
  • Document Third-Party Providers and POS vendors compliance
    • o Annual Compliance Documents verification
      • AOC (Attestation of Compliance) or ROC (Report of Compliance) from your vendor.
      • Payment card transaction flow diagram.
  • Other Resources
    • Collab
    • CampusGuard