Contributed by Organizations or Campuses; Articles, Papers, and Reports; and PCI DSS

"If you accept payment cards on campus, you need to comply with a standard designed for safe handling of sensitive consumer information. Indiana University’s compliance plans offer some guidance."

With all of the concern today about retailers inadequately protecting their credit card data, it's logical to assume that retail IT managers would have made themselves quite familiar with the ins-and-outs of the Payment Card Industry Data Security Standard (PCI DSS).

While PCI DSS applies to every organization that accepts payment cards, many education institutions have been slow to achieve campus-wide compliance. The situation is particularly unfortunate since education institutions – whether because of their open networks or inadequate security procedures – are particularly vulnerable to hacking and other compromises of confidential consumer data. As a result, financial institutions and card issuers increasingly view education institutions as risky merchants.

"In a psychologically fascinating 'grass is always greener on the other side of the firewall' scenario, states see the industry's PCI as the perfect security standard. And retail CIOs are salivating for Sarbanes-Oxley-like controls."

This document describes the 12 Payment Card Industry (PCI) Data Security Standard (DSS)
requirements. These PCI DSS requirements are organized in 6 logically related groups, which are
"control objectives."