Payment Card Industry Data Security Standards
Georgetown University is committed to protecting and preserving the privacy and security of payment card data collected and processed in connection with university business. Payment Card Industry Data Security Standards (PCI-DSS) supports this goal by establishing requirements for the secure handling and processing of payment card data.
Members of the university community share responsibility for safeguarding payment card information and data. The university is committed to ensuring that all payment card transactions are securely handled. All cardholder data is classified as Restricted under the university’s Information Classification Policy and must be protected accordingly. Required practices and procedures for the use, processing and destruction of payment cards and related data must be followed at all times in accordance with Georgetown University’s PCI-DSS Security Policy.
PCI Compliance Responsibility
Collectively, everyone who has any part in handling cardholder data is responsible for PCI Compliance. PCI responsibilities are centrally managed through the Office of the Chief Financial Officer and tracked by the Revenue, Receivables, and Payables team with the help of the Service Center Coordinators.
Resources
Training
Employees who meet the criteria for Card Processor, as defined by Georgetown University and its Service Center Coordinators, will be assigned PCI training and are required to complete the course within 30 days of employment, and annually after that.
The current training module is provided by Vector. Please note that the PCI-DSS training must be assigned to each Card Processor before it will be available in their training module library. Once redirected to the log-in screen, enter your Net ID and password to access the training Library. Once logged in, the training will be assigned to you under the MY ASSIGNMENTS tab. The training will be labeled PCI DSS: Payment Card Industry Data Security Standards (PCI-DSS).
Only staff members who have completed all required training and acknowledgements will be permitted to handle card data.
Policies
Contact
Service Center Coordinators play an integral role in ensuring Georgetown meets payment card industry standards by overseeing their various service centers. The coordinators work collaboratively with the Revenue, Receivables, and Payables team on the annual PCI audit and train staff on PCI standards.