Bank Card Processing: Difference between revisions

m
updated Controller email
No edit summary
m (updated Controller email)
 
(One intermediate revision by one other user not shown)
Line 43: Line 43:
It is the policy of the University of Nebraska Medical Center that all bank card transactions on the UNMC campus will be under the control of the Controller. Web-based bank card transactions must utilize the standard UNMC application provided by Information Technology Services.  
It is the policy of the University of Nebraska Medical Center that all bank card transactions on the UNMC campus will be under the control of the Controller. Web-based bank card transactions must utilize the standard UNMC application provided by Information Technology Services.  
==Bank Card Reporting ==
==Bank Card Reporting ==
Bank card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [http://info.unmc.edu/cashering.htm Finance Cashier].
Bank card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [https://info.unmc.edu/management/finance/cashering/index.html Finance Cashier].
== Internal Controls ==
== Internal Controls ==
*Departments will maintain written detailed internal procedures describing the proper handling of bank card transactions. These internal procedures must address the following, at a minimum;
*Departments will maintain written detailed internal procedures describing the proper handling of bank card transactions. These internal procedures must address the following, at a minimum;
Line 57: Line 57:
All bank card transactions will be processed in conformance with the Payment Card Industry Data Security Standards. A secure network environment is established for processing bank card transactions. A vulnerability management program is in place to ensure that the technical controls are functioning properly. Technical controls are in place to ensure that identity and access management is limited to those with a need to access the data in order to perform their job duties. Appropriate audit logging is enabled in order to track and monitor access. In the case of an information security event is found (such as an unauthorized wireless access point), the organization will follow the Incident Response Security Procedure. All members of UNMC complete annual information security compliance training.
All bank card transactions will be processed in conformance with the Payment Card Industry Data Security Standards. A secure network environment is established for processing bank card transactions. A vulnerability management program is in place to ensure that the technical controls are functioning properly. Technical controls are in place to ensure that identity and access management is limited to those with a need to access the data in order to perform their job duties. Appropriate audit logging is enabled in order to track and monitor access. In the case of an information security event is found (such as an unauthorized wireless access point), the organization will follow the Incident Response Security Procedure. All members of UNMC complete annual information security compliance training.
==Additional Information==
==Additional Information==
*Contact the [mailto:bfegley@unmc.edu Controller]
*Contact the [mailto:mhrncirik@unmc.edu Assistant Vice Chancellor for Business and Finance and Controller]
*See the [[Bank Card Handling Procedures]]<br />
*See the [[Bank Card Handling Procedures]]<br />


This page maintained by [mailto:dpanowic@unmc.edu dkp].
This page maintained by [mailto:dpanowic@unmc.edu dkp].