EDUCAUSE Live! September 5, 2007 1:00 p.m. ET (12:00 p.m. CT, 11:00 a.m. MT, 10:00 a.m. PT); runs one hour

Lessons Learned on the Road to PCI Compliance

Special Guests

Mark Welch
Project Coordinator, Credit Card Support Program
Office of Business Operations, University of Notre Dame

Mark Welch serves as project coordinator for the University of Notre Dame's Credit Card Support Program. In this role, he conducted operations to support the university's payment environment inventory, strategic planning, and implementation efforts and contributes to institutional plans for compliance maintenance. Previously, Welch managed Notre Dame's centralized e-commerce service, ND Marketplace. In that function, he designed and implemented business processes to support the then new service, analyzed merchants' business requirements, and adapted third-party software to meet those requirements.

Walt Conway
President
Walter Conway Associates, LLC

Walt Conway is an e-commerce consultant working with the Treasury Institute for Higher Education. Conway brings thirty years of payment system experience, including eleven years with Visa and two years as president of an Internet-based payment processor. A frequent faculty member and speaker at professional conferences organized by NACUBO, the Treasury Institute, Commonfund, and Professional Development Group, he authored the Electronic Payments section of NACUBO's College and University Business Administration manual. Conway coauthored an article in AFP Exchange examining security breaches at schools and the importance of PCI DSS compliance. He consults with education institutions on planning, implementing, and managing their e-commerce systems, including PCI DSS compliance.

Summary

Your host, Steve Worona, will be joined by Mark Welch and Walt Conway, and the topic will be "Lessons Learned on the Road to PCI Compliance."

Many of us are working within our institutions to achieve Payment Card Industry (PCI) compliance. We see a number of merchants on campuses with different business needs, systems, and vendor relationships in place. In many cases, achieving compliance with PCI DSS, the Data Security Standard, is proving difficult.

The presenters will share experiences and valuable lessons learned in implementing PCI DSS, including merchant levels (does it matter?), limiting the scope of the PCI effort (yes, it can be done), the Payment Applications Best Practices list (is it required?), and recent findings on information security breaches.

Welch and Conway will represent NACUBO and all of higher education at the first PCI Security Standards Council meeting of participating organizations to be held in Toronto next month. Bring your questions, suggestions, and observations to share with them in advance of that meeting.

Related EDUCAUSE Resources

• PCI DSS
• Archives of past EDUCAUSE Live! seminars