EDUCAUSE | Contributed by Organizations or Campuses; Articles, Papers, and Reports; and PCI DSS

Straight Talk About Data Security

ckeller — Wed, 02 Jan 2008 10:35:29 -0600

"If you accept payment cards on campus, you need to comply with a standard designed for safe handling of sensitive consumer information. Indiana University’s compliance plans offer some guidance."

PCI Confusion Is The Norm

ckeller — Fri, 07 Dec 2007 10:50:43 -0600

With all of the concern today about retailers inadequately protecting their credit card data, it's logical to assume that retail IT managers would have made themselves quite familiar with the ins-and-outs of the Payment Card Industry Data Security Standard (PCI DSS).

Why Banks View Campuses as High Risk Customers

ckeller — Wed, 11 Jul 2007 17:03:04 -0500

While PCI DSS applies to every organization that accepts payment cards, many education institutions have been slow to achieve campus-wide compliance. The situation is particularly unfortunate since education institutions – whether because of their open networks or inadequate security procedures – are particularly vulnerable to hacking and other compromises of confidential consumer data. As a result, financial institutions and card issuers increasingly view education institutions as risky merchants.

States' Freudian PCI Envy

ckeller — Fri, 29 Jun 2007 15:49:37 -0500

"In a psychologically fascinating 'grass is always greener on the other side of the firewall' scenario, states see the industry's PCI as the perfect security standard. And retail CIOs are salivating for Sarbanes-Oxley-like controls."

Payment Card Industry (PCI) Data Security Standard

ckeller — Mon, 11 Jun 2007 16:50:37 -0500

This document describes the 12 Payment Card Industry (PCI) Data Security Standard (DSS)
requirements. These PCI DSS requirements are organized in 6 logically related groups, which are
"control objectives."