CPE Please

refresher on all things PCI compliance

I feel like I know a little on PCI but it's been some time and appreciate this refresher.

A greater understanding of the process

Basics of PCI compliance.

Refresher of PCI Requirements

Basic background information

Common pitfalls (things to be sure to avoid)

I have a question about card readers at POS when info goes directly into the database. Do banks have systems in place so that fees can be lowered for Card Onsite as opposed to Card Not Present?

Or rather card info goes directly into Bank secure window for payment.

I don't know.

I don’t know. This is handled by our IT department.

I'm not sure

iMIS

MemberClicks

mostly through our AMS - GrowthZone but we also have an Authorize.net account

Salesforce

We use Association Anywhere, but they provide a window to our bank for secure transactions

Fonteva, but payment gateway is paypal

i believe

Yes

Unknown

do not know

Again, I don’t know. Our IT Dept. handles all these kinds of things.

not me personally, but someone else in our office did

No

Yes, but it was completed by the IT department (not my department)

Not sure

I don't know.

I don’t know

not sure

making sure everyone in the office is following the rules!!!

in-take from numerous sources

It is a lot of information that the staff needs to be trained on.

Checking on to see if another person does this or if we need to get going on it.

Making sure staff are aware

PCI is new to me. I guess the biggest hurdle is our IT Department enlightening us on this.

About 10% of customers email us their credit card info. So destroying/redacting is necessary.

telephone call in of credit card numbers

had a previous employee who argued about whether he could store cc info. 🙁

@Cybil, that would be a solid NO, haha!

@Jenni He didn't think so. He has since found a different opportunity :)

Is Tokenization like what ApplePay does?

Does the CSC get attached to the token as well?

If I recall the token is specific to the vendor AND card. So if a token is used by another vendor, it doesn't go through. Right?

We use KnowB4

Our company uses KnowB4

Not sure

The tips, the reasons why the process is the way it is.

always helpful to get a refresh on requirements. need to keep it fresh on the mind!

I need to talk to our IT Department to learn what they are doing and make sure they have a compliance program in place.

utilize a secure payment gateway - merchant bank provided.

Understanding the procedures involved

general flow of cc information

I need to look into if our organization is compliant and if so, who does the reports?

The Tips, I was busy asking questions of my IT staff while you were talking - the MS 365 enabler for emails.

wadetetsuka@ustranscorp.com

jenni@ustranscorp.com

Need to share these tips with my finance department. Thank you!

thanks

Thanks!