263
edits
Bank Card Handling Procedures: Difference between revisions
m
→Establishing the Ability to Accept Bank Card Payments:
(Created page with "<table style="background:#F8FCFF; text-align:center" width="100%" cellspacing="0" cellpadding="0" border="0"> <tr> <td style="padding:0.5em; background-color:#e5e5e5; font-siz...") |
Mhurlocker (talk | contribs) |
||
| (4 intermediate revisions by one other user not shown) | |||
| Line 31: | Line 31: | ||
==Establishing the Ability to Accept Bank Card Payments: == | ==Establishing the Ability to Accept Bank Card Payments: == | ||
To establish the ability to accept bank card payments, departments should: | To establish the ability to accept bank card payments, departments should: | ||
*Send a written request for authorization to the Controller | *Send a written request for authorization to the Controller [mailto:mhrncirik@unmc.edu Mike Hrncirik], zip 5080. | ||
*Contact [mailto:terry.lilla Terry Lilla], the Finance Cashier Office, for bank contact and equipment options information. | *Contact [mailto:terry.lilla@unmc.edu Terry Lilla], the Finance Cashier Office, for bank contact and equipment options information. | ||
*Notify [ | *Notify [mailto:tcarlson@unomaha.edu Teresa Carlson], Accounts Payable, that the department will be taking bank card payments and of the cost center to which monthly processing transactions will be charged. | ||
== Transmitting Bank Card Payment Receipts to the Finance Cashier and Retaining Bank Card Information == | == Transmitting Bank Card Payment Receipts to the Finance Cashier and Retaining Bank Card Information == | ||
*Bank card machine transactions should be closed out via automatic closing at least once per business day. | *Bank card machine transactions should be closed out via automatic closing at least once per business day. | ||
| Line 43: | Line 43: | ||
== Discontinuing the Acceptance of Bank Card Payments == | == Discontinuing the Acceptance of Bank Card Payments == | ||
To discontinue accepting bank card payments, departments should: | To discontinue accepting bank card payments, departments should: | ||
*Notify the [mailto: | *Notify the [mailto:mhrncirik@unmc.edu Controller], the [mailto:terry.lilla@unmc.edu Finance Cashier Office] and [mailto:tcarlson@unomaha.edu Accounts Payable]. | ||
*Return any leased equipment.<br /> | *Return any leased equipment.<br /> | ||
| Line 62: | Line 62: | ||
===Security Parameters=== | ===Security Parameters=== | ||
*Configuration standards are followed for all system components impacting the cardholder data environment. | *Configuration standards are followed for all system components impacting the cardholder data environment. | ||
**Network configuration follows the DISA Security Technical Implementation Guides | |||
*All vendor supplied defaults for system passwords and other security parameters are changed prior to being placed in production. | *All vendor supplied defaults for system passwords and other security parameters are changed prior to being placed in production. | ||
*Only necessary services, protocols, daemons will be enabled as required for the function of the system. Additional security features are implemented for any required services, protocols, or daemons that are considered insecure (i.e. SSH, S-FTP etc.). | *Only necessary services, protocols, daemons will be enabled as required for the function of the system. Additional security features are implemented for any required services, protocols, or daemons that are considered insecure (i.e. SSH, S-FTP etc.). | ||
| Line 110: | Line 109: | ||
*All exploitable vulnerabilities found will be remediated. | *All exploitable vulnerabilities found will be remediated. | ||
*Utilize and monitor an intrusion prevention system | *Utilize and monitor an intrusion prevention system | ||
*A change detection mechanism of | *A change detection mechanism of configuration file integrity monitoring is implemented. | ||
==Additional Information== | |||
*Contact the [mailto:mhrncirik@unmc.edu Controller] | |||
*Contact the [mailto:terry.lilla@unmc.edu Finance Cashier Office] | |||
*Contact [mailto:tcarlson@unomaha.edu Accounts Payable] | |||
*UNMC Policy No. 6050, [[Bank Card Processing]]<br /> | |||
This page maintained by [mailto:dpanowic@unmc.edu dkp].<br /> | |||
<br /> | <br /> | ||
Last Review by Policy Owner: '''06/30/14''' | Last Review by Policy Owner: '''06/30/14''' | ||