![]() Any e-commerce transactions at the University must be processed using the University’s preferred provider unless an exception is approved by Bursar.ĭefinition: Credit card transactions processed through an external party to OHIO. Transactions could occur through the centralized University provider or decentralized (department specific) OHIO-owned software. PROCESSING TYPES Typeĭefinition: The location where a credit card transaction occurs through a terminal or register.Īpplicable Parties: Determined by a high frequency of business traditionally transacted through POS (register) devices, bank-owned desktop terminals and/or computers.ĭefinition: The buying and selling of products or services over the Internet.Īpplicable Parties: Determined by a medium to high frequency of business traditionally transacted through web-based software. University departments will be held liable for all penalties resulting from noncompliance with this procedure. ![]() It is the procedure of Ohio University that only departments who have been approved may accept payment for goods or services via credit card. Depending on the determined credit card processing type, a merchant ID may need to be established. ![]() Bursar must be included prior to purchasing credit card applications. To be approved to accept credit cards, departments must contact the Office of the Bursar to discuss credit card processing options. Furthermore, these directives provide guidance to maximize compliance with the Payment Card Industry (PCI) Data Security Standards (DSS) and ensure appropriate integration with the University’s financial and other systems. Departments accepting credit cards at OHIO are required to follow strict procedures to protect customers' credit card data. Departments that have been approved to do so may accept VISA, MasterCard, Discover, American Express, debit cards with a VISA or MasterCard logo, and pin-based debit. OHIO accepts credit card payments as a convenience to its customers. ![]() The following procedures are for use by departments accepting credit cards as a form of payment in conducting official business at Ohio University. OHIO PCI DSS – General PCI DSS Procedure Introduction Questions regarding this procedure should be directed to the OHIO PCI DSS Compliance Committee. Not all components of the requirements listed in this document are directly applicable to the individual OHIO merchants, but are required to be attained by the OHIO as a whole. These policies may be updated at any time and must be reviewed annually for changes. Any changes to the policies herein must be approved and disseminated by OHIO PCI DSS Compliance Committee. These policies apply to all employees, systems and networks involved with credit card processing which includes transmission, storage and/or processing of credit card numbers at Ohio University.Īll employees involved in the Card Processing Environment (CPE) must read, understand and agree to abide by all policies in this manual. This manual defines all policies and procedures required for compliance with the Payment Card Industry Data Security Standard (PCI DSS). As such, it is the intent of Ohio University (OHIO) through this procedure to protect the privacy of our customers and maintain compliance with Payment Card Industry Data Security Standards (PCI DSS). Many departments and merchants on campus process credit card transactions in the course of daily business. The credit card industry requires compliance with these standards in order for a merchant to accept credit card payments. reporting of a breach of credit card information.controls for handling and restricting credit card information.Failure to comply can result in more stringent requirements for compliance, fines, and/or suspension of credit card processing services. Organizations that choose to accept credit card transactions as a form of payment are contractually required to follow the standards set forth by the PCI Security Standards Council. The Payment Card Industry (PCI) Security Standards Council, an organization composed of the major credit card companies, has developed data security standards to ensure that credit card transactions are reliable and secure.
0 Comments
Leave a Reply. |