Credit Card Processing: Difference between revisions

no edit summary
No edit summary
Line 27: Line 27:
Policy No.: '''6050'''<br />
Policy No.: '''6050'''<br />
Effective Date: '''01/10/07'''<br />
Effective Date: '''01/10/07'''<br />
Revised Date: '''12/28/12'''<br />
Revised Date: '''06/30/14'''<br />
Reviewed Date: '''12/28/12'''<br />
Reviewed Date: '''06/30/14'''<br />
<br />
<br />
<br />
<br />
'''<big>Credit Card Processing Policy</big>'''
'''<big>Bank Card Processing Policy</big>'''
== Basis for Policy ==
== Basis for Policy ==
It is the policy of the University of Nebraska Medical Center (UNMC) to establish good internal controls over the handling of credit card transactions to adequately safeguard and properly record UNMC assets and to protect the employees who handle those assets.&nbsp; Further, it is the policy of UNMC to comply with all [http://www.nebraskalegislature.gov/laws/laws.php state regulations] and the Payment Card Industry Data Security Standards (PCI/DSS).
It is the policy of the University of Nebraska Medical Center (UNMC) to establish good internal controls over the handling of credit card transactions to adequately safeguard and properly record UNMC assets and to protect the employees who handle those assets.&nbsp; Further, it is the policy of UNMC to comply with all [http://www.nebraskalegislature.gov/laws/laws.php state regulations] and the Payment Card Industry Data Security Standards (PCI/DSS).
== Authority Over Credit Card Transactions ==
==Definitions==
It is the policy of the University of Nebraska Medical Center that all credit card transactions on the UNMC campus will be under the control of the Controller.&nbsp; Web based credit card transactions must utilize the standard UNMC application.
Bank card is defined as credit cards, debit cards, ATM cards and any other card or device, other than cash or checks, issued by a bank or credit union that is normally presented by a person seeking to make payment.  The process of paying is considered as the transaction.<br />
== Credit Card Reporting ==
<br />
Credit card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [http://info.unmc.edu/cashering.htm Finance Cashier].
Payment Card Industry Data Security Standards (PCI/DSS) are guidance for organizations to assist in providing data security on payment card transactions.
== Authority Over Bank Card Transactions ==
It is the policy of the University of Nebraska Medical Center that all credit card transactions on the UNMC campus will be under the control of the Controller. Web-based bank card transactions must utilize the standard UNMC application provided by Information Technology Services.  
==Bank Card Reporting ==
Bank card collections received by departments for UNMC will be submitted along with cash/check collections and a Cash Remittance Report to the [http://info.unmc.edu/cashering.htm Finance Cashier].
== Internal Controls ==


== Internal Controls ==
Departments are required to establish the following internal controls over credit card transactions:
*Departments will maintain written detailed internal procedures describing the proper handling of credit card transactions.
*Under no circumstances should credit card information be entered and stored on any computer database.&nbsp; UNMC has made the decision to outsource the credit card processing.&nbsp; UNMC ITS Application Services has a module which is utilized to bridge the web application which requires a credit card payment and the credit card processing company.
== Auditing Cash Funds ==
== Auditing Cash Funds ==
All credit card transactions will be reviewed periodically and confirmed annually to assist in maintaining proper accountability and internal control. In addition, written departmental credit card procedures will be reviewed for conformity with UNMC policies, State Treasurer regulations, and Payment Card Industry Data Security Standards.
All credit card transactions will be reviewed periodically and confirmed annually to assist in maintaining proper accountability and internal control. In addition, written departmental credit card procedures will be reviewed for conformity with UNMC policies, State Treasurer regulations, and Payment Card Industry Data Security Standards.<br />
<br />
<br />
For more detailed information, see the [[Credit Card Handling Procedures]] or contact the [mailto:ckirchner@unmc.edu Controller].
<br />
<br />
For more detailed information, see the [[Bank Card Handling Procedures]] or contact the [mailto:wlawlor@unmc.edu Controller].<br />
<br />
<br />
This page maintained by [mailto:dpanowic@unmc.edu dkp].
This page maintained by [mailto:dpanowic@unmc.edu dkp].