https://library.educause.edu/topics/policy-and-law/pci-dssen{EE0BBE4C-3E1F-4D50-8743-F445ECCA7283}https://library.educause.edu/resources/2014/2/ndsu-guidelines-for-protecting-sensitive-dataThis NDSU website includes important information for NDSU employees to follow when dealing with personal and confidential data.Tue, 22 Dec 2015 17:36:40 Z{F113B840-D03C-4339-BB61-7818FD24DADE}https://library.educause.edu/resources/2013/12/payment-card-industry-data-security-standard-pcidss-security-audit-proceduresThe PCI Security Audit Procedures are designed for use by assessors conducting onsite reviews for merchants and service providers required to validate compliance with Payment Card Industry (PCI) Data Security Standard (DSS) requirements.Tue, 22 Dec 2015 17:35:09 Z{6FFE816B-A59B-4269-940A-0D2437E56B7C}https://library.educause.edu/resources/2013/12/payment-card-industry-data-security-standard-pcidss-security-scanning-proceduresThis document explains the purpose and scope of the Payment Card Industry (PCI) Security Scan for merchants and service providers who undergo PCI Security Scans to help validate compliance with the PCI Data Security Standard (DSS).Tue, 22 Dec 2015 17:35:09 Z{D51E450F-FA59-401B-9E79-47CF7188CF59}https://library.educause.edu/resources/2013/8/kumc-payment-card-acceptance-operational-protocol-pciThe University of Kansas Medical Center (KUMC) PCI DSS policy seeks to apply best security practices to protect against the exposure and possible theft of account and personal cardholder information by complying with credit card company requirements for storing, processing, and transferring payment card information (PCI Data Security Standards) as well as security "best practices.Tue, 22 Dec 2015 17:35:04 Z{98F4BAB8-4D20-4CEB-8AC3-BFC85830B3C2}https://library.educause.edu/resources/2013/6/university-of-british-columbia-pci-compliance-resourcesThis web site is the University of British Columbia's PCI-DSS resource page for its merchants. The site includes their PCI-DSS policy, guidelines, and templates.Tue, 22 Dec 2015 17:35:53 Z{F3B8C176-1356-4212-AF46-068BC5206AC1}https://library.educause.edu/resources/2013/1/cornell-university-accepting-credit-cards-to-conduct-university-businessThis is Cornell University's policy on Accepting Credit Cards to Conduct University Business.Tue, 22 Dec 2015 17:34:51 Z{533D687B-D038-4832-9535-2ABDC4B09673}https://library.educause.edu/resources/2010/3/compliance-matrix-poster-for-it-compliance-professionalsThis matrix poster developed by Symantec outlines IT Controls for security and privacy concerns related to regulatory compliance in the workplace.Tue, 22 Dec 2015 17:24:51 Z{B4DFDB3C-24CB-4C17-968E-D0A254F1358D}https://library.educause.edu/resources/2010/1/information-security-and-data-breach-notification-safeguardsThe 2010 report describes information security and data breach notification requirements included in the Privacy Act, the Federal Information Security Management Act (FISMA), Office of Management and Budget (OMB) Guidance, the Veterans Affairs Information Security Act, the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act, the Gramm-Leach-Bliley Act (GLBA), the Fede ...Tue, 22 Dec 2015 17:25:19 Z{DC6528BC-1A07-44AD-BCBC-FACC47103EBA}https://library.educause.edu/resources/2009/12/unviersity-of-minnesota-accepting-revenue-via-payment-cardsThis is the Unviersity of Minnesota policy on Accepting Revenue Via Payment Cards.Tue, 22 Dec 2015 17:23:23 Z{B4E16B83-BD59-48AA-BED2-0F782F959A2D}https://library.educause.edu/resources/2009/8/unviersity-of-utah-policy-on-payment-card-acceptance This policy governs the acceptance of payment cards (e.g. Visa, MasterCard, American Express, and Discover) by the University of Utah.Tue, 22 Dec 2015 17:23:24 Z{55AACCE2-C015-455D-9B1F-6300B7282B99}https://library.educause.edu/resources/2007/12/pci-confusion-is-the-normWith all of the concern today about retailers inadequately protecting their credit card data, it's logical to assume that retail IT managers would have made themselves quite familiar with the ins-and-outs of the Payment Card Industry Data Security Standard (PCI DSS).Tue, 22 Dec 2015 17:15:02 Z{E63E20F7-F897-4924-B7A5-7930D46C0FF6}https://library.educause.edu/resources/2007/8/duke-university-the-payment-card-industry-pci-data-security-standardThis document outlines Duke University's expectations of departments accepting credit card payments as related to the Payment Card Industry Data Security Standard (http://www.Tue, 22 Dec 2015 17:13:14 Z{F41EA753-4EB0-479E-B47F-B4B667C4970B}https://library.educause.edu/resources/2007/7/treasury-institute-blogThis blog is designed for both business and technical staff to ask questions, respond to posts, and get answers.Tue, 22 Dec 2015 17:16:28 Z{126A19A1-7F24-4B3A-B5DE-A1A1B43BC035}https://library.educause.edu/resources/2007/6/states-freudian-pci-envy"In a psychologically fascinating 'grass is always greener on the other side of the firewall' scenario, states see the industry's PCI as the perfect security standard.Tue, 22 Dec 2015 17:15:50 Z{1D4841DF-FB39-4784-8D5A-C8560BE52997}https://library.educause.edu/resources/2007/3/why-banks-view-campuses-as-high-risk-customersWhile PCI DSS applies to every organization that accepts payment cards, many education institutions have been slow to achieve campus-wide compliance.Tue, 22 Dec 2015 17:16:46 Z{15B731FC-ECA4-4459-9A8E-7E1069521FFE}https://library.educause.edu/resources/2006/9/payment-card-industry-pci-data-security-standardThis document describes the 12 Payment Card Industry (PCI) Data Security Standard (DSS)requirements. These PCI DSS requirements are organized in 6 logically related groups, which are"control objectives.Tue, 22 Dec 2015 17:10:59 Z{2E24EF21-AC1D-4D34-9ADB-9E5269B8ADF4}https://library.educause.edu/resources/2006/5/pcidss-workshop-materialsThe Treasury Institute for Higher Education held a workship on PCI DSS in May of 2007. This site includes materials for the workship.Tue, 22 Dec 2015 17:10:59 Z