PCI DSS - 29 Resources

Overview
Publications (13)
Presentations (12)
Policies (8)
Podcasts (1)
Blogs (3)

Overview

Introduction

The Payment Card Industry Data Security Standard (PCI DSS) first came on the scene in 2005 as a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International, to help facilitate the broad adoption of consistent data security measures on a global basis. The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

To the extent that colleges and universities accept credit card payments for tuition, fees, conference registrations, or other services, institutions of higher education will have contractual obligations to fulfill the data security standards established by the payment card industry. Some colleges and universities have begun to consider the standards as a potential model for the handling of all types of sensitive data at their institutions and are exploring the extension of the standards to other types of information collected, stored, and distributed on campus networks.

Background

The Treasury Institute for Higher Education has been the focal point for helping colleges and universities to become PCI DSS compliant, hosting two workshops for the higher education community. In partnership with the National Association of College and University Business Officers (NACUBO), the Treasury Institute represent the business and financial interests of institutions of higher education. Additionally, information security officers and other IT staff from colleges and universities have attended the workshops and several institutions have been actively pursuing PCI DSS compliance for their institution. The Treasury Institute has also published a whitepaper for higher education and a checklist of best practices.

The PCI Security Standards Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. The PCI Security Standards Council’s mission is to enhance payment account data security by fostering broad adoption of the PCI Security Standards. The organization was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International.

View All Subscribe

The Payment Card Industry Data Security Standard (PCI DSS) is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures.

Publications (13)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about PCI DSS.

Item ID	Title	Resource Category	Pub Date	Views
ERM0759	“Give Us Credit”: Evolving Security Standards for Credit Card Information Jane Drews and Kathleen R. Kimball Articles, Papers, and Reports	EDUCAUSE Review	08/29/2007	3,635
CSD5261	PCI Confusion Is The Norm Evan Schuman Articles, Papers, and Reports	Community Recommendation	12/07/2007	513
CSD5298	Straight Talk About Data Security Walter Conway and Dennis Reedy Articles, Papers, and Reports	Community Recommendation	12/26/2007	560
EPS280	E-Commerce and the Cardholder Information Security Program (CISP) Connie J. Sadler Effective Practices	Community Recommendation	01/01/2005	2,556
CSD4953	PCI Security Standards Council Web Sites	Community Recommendation	06/11/2007	1,584
CSD4955	VISA USA's Cardholder Information Security Program (CISP) Programs and Projects	Community Recommendation	06/11/2007	1,531
CSD4956	The MasterCard SDP (Site Data Protection) Program Programs and Projects	Community Recommendation	06/11/2007	1,596
CSD4957	Payment Card Industry (PCI) Data Security Standard Articles, Papers, and Reports	Community Recommendation	09/11/2006	2,030
CSD4960	Payment Card Industry Data Security Standard (PCI-DSS): Self-Assessment Questionnaire Tools	Community Recommendation	12/01/2004	2,149
CSD4997	States' Freudian PCI Envy Evan Schuman Articles, Papers, and Reports	Community Recommendation	06/29/2007	2,120
CSD5005	Treasury Institute For Higher Education PCI DSS Resources Web Sites	Community Recommendation	07/11/2007	2,425
CSD5006	Why Banks View Campuses as High Risk Customers Walter Conway and Dennis Reedy Articles, Papers, and Reports	Community Recommendation	03/11/2007	2,367
CSD5016	Treasury Institute Blog Blogs	Community Recommendation	07/25/2007	2,185

Presentations (12)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with PCI DSS

Item ID	Title	Resource Category	Pub Date	Views
MARC09_48024	Performing Risk Analysis and Testing: Outsource or In-House? A Towson University Case Study Lynn Ray Presentations/Speeches	Mid-Atlantic Regional	01/07/2009	423
SEC09_170502	Conducting Internal PCI DSS Assessments Presentations and Seminars	Security Professionals Conference	04/22/2009	274
SEC08064	PCI DSS Lessons Learned Jennifer A. Stewart and Michael Leach Presentations/Speeches	Security Professionals Conference	05/04/2008	334
SEC08074	The Data Center Within a Data Center: Building a Secure Environment for Compliance David Seidl Presentations/Speeches	Security Professionals Conference	05/04/2008	492
EDU07037	Secure Data Exchange Theresa Rowe Presentations/Speeches	EDUCAUSE Annual	10/23/2007	700
MWR08070	Navigating the Regulatory Maze: Notre Dame’s PCI Solution Robert M. Winding, Michael Chapple, David Seidl, and Robert Richman Presentations/Speeches	Midwest Regional	03/17/2008	548
EDU07218	Tackling Campus-Wide E-Commerce Troy Boroughs Presentations/Speeches	EDUCAUSE Annual	10/23/2007	464
EDU07285	PCI Compliance in the University Setting John Chapman, Jay Maylor, and Sandie Rosko Presentations/Speeches	EDUCAUSE Annual	10/23/2007	1,283
SEC07074	Roundup of Legal Developments in Cybersecurity and Privacy Law M. Peter Adler Presentations/Speeches	Security Professionals Conference	04/11/2007	1,838
LIVE0717	Lessons Learned on the Road to PCI Compliance Mark S. Welch and Walter Conway Presentations/Speeches	Web Seminars EDUCAUSE	09/05/2007	3,193
CSD4961	PCI/DSS Workshop Materials Presentations/Speeches	Community Recommendation	05/31/2006	2,123
SPC0674	Two Approaches to PCI DSS Compliance Michael Chapple and Jane Drews Presentations/Speeches	Security Professionals Conference	04/11/2006	2,820

Policies (8)

Item ID	Title	Resource Category	Pub Date	Views
CSD4958	Payment Card Industry Data Security Standard (PCI-DSS): Security Scanning Procedures Policies and Procedures	Community Recommendation	09/11/2006	1,736
CSD4959	Payment Card Industry Data Security Standard (PCI-DSS): Security Audit Procedures Policies and Procedures	Community Recommendation	09/11/2006	2,164
CSD5033	Accepting Credit Cards Policies and Procedures	Community Recommendation	08/02/2007	2,999
CSD5045	University of Notre Dame Payment Card Policy Policies and Procedures	Community Recommendation	08/02/2007	2,663
CSD5046	The University of Iowa Credit Card Handling Policies and Procedures Policies and Procedures	Community Recommendation	08/13/2007	2,906
CSD5047	Duke University: The Payment Card Industry (PCI) Data Security Standard Policies and Procedures	Community Recommendation	08/01/2007	3,042
CSD5048	Policy Coverage Matrix for Payment Card Industry Policies and Procedures	Community Recommendation	08/13/2007	2,891
CSD5049	Bankcard Information Security Requirements Policies and Procedures	Community Recommendation	09/13/2006	3,042

Podcasts (1)

Name	Views	Post date
EDUCAUSE LIVE! Podcast: Lessons Learned on the Road to PCI Compliance Play \| Show Notes \| Download (40.53 MB audio/mpeg)	3,900	09/12/2007

Blogs (3)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
PCI DSS (and more!) Workshop	Valerie M. Vogel, EDUCAUSE	03/05/2009	499
Tune In September 5: Free Web Seminar on Payment Card Industry (PCI) Compliance in Higher Education	Colleen Luckett, EDUCAUSE	08/28/2007	3,714
New Resource Page on PCI DSS (Payment Card Industry Data Security Standard)	Valerie M. Vogel, EDUCAUSE	06/15/2007	3,493

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!