Credit Card Processing: Difference between revisions

Jump to navigation Jump to search
→‎Technical Controls: change wlawlor@unmc.edu to jeffrey.miller@unmc.edu
No edit summary
(→‎Technical Controls: change wlawlor@unmc.edu to jeffrey.miller@unmc.edu)
(3 intermediate revisions by 2 users not shown)
Line 23: Line 23:
</table>
</table>
<br />
<br />
[[General Accounting]] | [[SBIR/STTR Program Participation]] | [[Supplemental Compensation Plan]] | [[Facilities Management/Planning]] | [[Purchasing]] | [[Public Affairs]] | [[Facility Identification]] | [[Serving Alcoholic Beverages]] | [[Travel and Reimbursement]] | [[State Vehicles]] | [[Reproducing Copyrighted Materials]] | [[Credit Card Processing]] | [[Student Training Agreement]] | [[Volunteer]] | [[Cash Handling]] | [[Fraud]] | [[Assigning Research Lab Space]] | [[Space Scheduling]] | [[International Health Education]] | [[Faculty Personnel Records]] | [[Cellular Phone]] | [[Off-campus Graphic Design and Related Printing]] | [[Off-campus Photography]] | [[Tax Exempt Financing and Tracking of Both Qualified Use and Non-Qualified Use of Research Space]] | [[Secondary Logos]] | [[Social Media]]
[[General Accounting]] | [[SBIR/STTR Program Participation]] | [[Supplemental Compensation Plan]] | [[Facilities Management/Planning]] | [[Purchasing]] | [[Public Affairs]] | [[Facility Identification]] | [[Serving Alcoholic Beverages]] | [[Travel and Reimbursement]] | [[State Vehicles]] | [[Reproducing Copyrighted Materials]] | [[Credit Card Processing]] | [[Student Training Agreement]] | [[Volunteer]] | [[Cash Handling]] | [[Fraud]] | [[Assigning Research Lab Space]] | [[Space Scheduling and Fundraising]] | [[International Health Education]] | [[Faculty Personnel Records]] | [[Cellular Phone]] | [[Off-campus Graphic Design and Related Printing]] | [[Off-campus Photography]] | [[Tax Exempt Financing and Tracking of Both Qualified Use and Non-Qualified Use of Research Space]] | [[Secondary Logos]] | [[Social Media]] | [[Accounts Receivable Management]]
<br /><br />
<br /><br />
Policy No.: '''6050'''<br />
Policy No.: '''6050'''<br />
Effective Date: '''01/10/07'''<br />
Effective Date: '''01/10/07'''<br />
Revised Date: '''06/30/14'''<br />
Revised Date: '''06/30/14'''<br />
Reviewed Date: '''06/30/14'''<br />
Reviewed Date: '''06/30/14'''
<br />
<br /><br />
<br />
'''<big>Bank Card Processing Policy</big>'''
'''<big>Bank Card Processing Policy</big>'''
== Basis for Policy ==
== Basis for Policy ==
Line 41: Line 40:
It is the policy of the University of Nebraska Medical Center that all bank card transactions on the UNMC campus will be under the control of the Controller. Web-based bank card transactions must utilize the standard UNMC application provided by Information Technology Services.  
It is the policy of the University of Nebraska Medical Center that all bank card transactions on the UNMC campus will be under the control of the Controller. Web-based bank card transactions must utilize the standard UNMC application provided by Information Technology Services.  
==Bank Card Reporting ==
==Bank Card Reporting ==
Bank card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [http://info.unmc.edu/cashering.htm Finance Cashier].
Bank card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [http://info.unmc.edu/management/finance/cashering/ Finance Cashier].
 
== Internal Controls ==
== Internal Controls ==
*Departments will maintain written detailed internal procedures describing the proper handling of bank card transactions. These internal procedures must address the following, at a minimum;
*Departments will maintain written detailed internal procedures describing the proper handling of bank card transactions. These internal procedures must address the following, at a minimum;
Line 53: Line 53:
All bank card transactions will be reviewed periodically and confirmed annually to assist in maintaining proper accountability and internal control. In addition, written departmental bank card procedures will be reviewed for conformity with UNMC policies, State Treasurer regulations, and Payment Card Industry Data Security Standards.
All bank card transactions will be reviewed periodically and confirmed annually to assist in maintaining proper accountability and internal control. In addition, written departmental bank card procedures will be reviewed for conformity with UNMC policies, State Treasurer regulations, and Payment Card Industry Data Security Standards.
==Technical Controls==
==Technical Controls==
All bank card transactions will be processed in conformance with the Payment Card Industry Data Security Standards. A secure network environment is established for processing of bank card transactions. A vulnerabilty management program is in place to ensure that the technical controls are functioning properly. Technical controls are in place to ensure that identity and access management is limited to those with a need to access the data in order to perform their job duties. Appropriate audit logging is enabled in order to track and monitor access. In the case of an information security event is found (such as an unauthorized wireless access point), the organization will follow the Incident Response Security Procedure. All members of UNMC complete annual information security compliance training.<br />
All bank card transactions will be processed in conformance with the Payment Card Industry Data Security Standards. A secure network environment is established for processing of bank card transactions. A vulnerability management program is in place to ensure that the technical controls are functioning properly. Technical controls are in place to ensure that identity and access management is limited to those with a need to access the data in order to perform their job duties. Appropriate audit logging is enabled in order to track and monitor access. In the case of an information security event is found (such as an unauthorized wireless access point), the organization will follow the Incident Response Security Procedure. All members of UNMC complete annual information security compliance training.<br />
<br />
<br />
For more detailed information, see the [[Bank Card Handling Procedures]] or contact the [mailto:wlawlor@unmc.edu Controller].<br />
For more detailed information, see the [[Bank Card Handling Procedures]] or contact the [mailto:jeffrey.miller@unmc.edu Controller].<br />
<br />
<br />
This page maintained by [mailto:dpanowic@unmc.edu dkp].
This page maintained by [mailto:dpanowic@unmc.edu dkp].

Navigation menu