PCI DSS - 4 Resources

Overview
Policies (8)
Podcasts (1)
Blogs (3)

Overview

Introduction

The Payment Card Industry Data Security Standard (PCI DSS) first came on the scene in 2005 as a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International, to help facilitate the broad adoption of consistent data security measures on a global basis. The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

To the extent that colleges and universities accept credit card payments for tuition, fees, conference registrations, or other services, institutions of higher education will have contractual obligations to fulfill the data security standards established by the payment card industry. Some colleges and universities have begun to consider the standards as a potential model for the handling of all types of sensitive data at their institutions and are exploring the extension of the standards to other types of information collected, stored, and distributed on campus networks.

Background

The Treasury Institute for Higher Education has been the focal point for helping colleges and universities to become PCI DSS compliant, hosting two workshops for the higher education community. In partnership with the National Association of College and University Business Officers (NACUBO), the Treasury Institute represent the business and financial interests of institutions of higher education. Additionally, information security officers and other IT staff from colleges and universities have attended the workshops and several institutions have been actively pursuing PCI DSS compliance for their institution. The Treasury Institute has also published a whitepaper for higher education and a checklist of best practices.

The PCI Security Standards Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. The PCI Security Standards Council’s mission is to enhance payment account data security by fostering broad adoption of the PCI Security Standards. The organization was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International.

View All Subscribe

The Payment Card Industry Data Security Standard (PCI DSS) is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures.

Policies (8)

Item ID	Title	Resource Category	Pub Date	Views
CSD4958	Payment Card Industry Data Security Standard (PCI-DSS): Security Scanning Procedures Policies and Procedures	Community Recommendation	09/11/2006	1,737
CSD4959	Payment Card Industry Data Security Standard (PCI-DSS): Security Audit Procedures Policies and Procedures	Community Recommendation	09/11/2006	2,164
CSD5033	Accepting Credit Cards Policies and Procedures	Community Recommendation	08/02/2007	3,003
CSD5045	University of Notre Dame Payment Card Policy Policies and Procedures	Community Recommendation	08/02/2007	2,665
CSD5046	The University of Iowa Credit Card Handling Policies and Procedures Policies and Procedures	Community Recommendation	08/13/2007	2,907
CSD5047	Duke University: The Payment Card Industry (PCI) Data Security Standard Policies and Procedures	Community Recommendation	08/01/2007	3,043
CSD5048	Policy Coverage Matrix for Payment Card Industry Policies and Procedures	Community Recommendation	08/13/2007	2,892
CSD5049	Bankcard Information Security Requirements Policies and Procedures	Community Recommendation	09/13/2006	3,044

Podcasts (1)

Name	Views	Post date
EDUCAUSE LIVE! Podcast: Lessons Learned on the Road to PCI Compliance Play \| Show Notes \| Download (40.53 MB audio/mpeg)	3,900	09/12/2007

Blogs (3)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
New Resource Page on PCI DSS (Payment Card Industry Data Security Standard)	Valerie M. Vogel, EDUCAUSE	06/15/2007	3,493
Tune In September 5: Free Web Seminar on Payment Card Industry (PCI) Compliance in Higher Education	Colleen Luckett, EDUCAUSE	08/28/2007	3,714
PCI DSS (and more!) Workshop	Valerie M. Vogel, EDUCAUSE	03/05/2009	502

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!