Annual Credit Card Merchant Self-Assessment

[Business Affairs Office News]

To:          Deans, Directors, and Department Heads
Campus Financial Managers and Credit Card Merchants
Campus IT Directors
From:    Kelly B. Wolf, Director of Business Affairs and Controller
Date:     October 28, 2013
Re:         Annual Credit Card Merchant Self-Assessment
For the year ending September 1, 2013, University of Oregon merchants processed 721K credit card payments for a total of $50M in revenue.  The largest campus credit card processors were:

*         Athletics, 130K transactions, $38.5M

*         EMU, 355K transactions, $2M

*         Parking and Transportation, 87K transactions, $787K

*         Housing, Dining and Catering, 70K transactions, $826K
Card acceptance entails risks and responsibilities. A data breach or exposure can result in significant financial impact (i.e., fines, mandatory independent security consulting, credit monitoring, cardholder notifications) and reputational damage.
University policy on electronic commerce (pending review) prohibits electronic storage of cardholder data on the university network and strongly discourages processing on university computers.  http://ba.uoregon.edu/sites/ba.uoregon.edu/files/ecommerce_policy.pdf
Payment card industry rules require that all credit card merchants (worldwide) complete an annual Self-Assessment Questionnaire (SAQ) to validate compliance with the Payment Card Industry Data Security Standards (PCI DSS).
Business Affairs coordinates the annual self-assessment process. Again this year, we ask that campus financial managers determine the SAQ they are eligible for, and complete it using the MS Word templates and instructions on the Business Affairs website:
http://ba.uoregon.edu/staff/ecommerce
The Dean, Director, or Department Head will sign Part 3 of the SAQ as 'Merchant Executive Officer' attesting to the compliance status of his/her unit.
A list of university credit card merchants is attached (Appendix A).
Please provide SAQs in electronic format to Mark McCulloch mmccullo at uoregon.edu<mailto:mmccullo at uoregon.edu> by December 31, 2013.
If you would like assistance with accepting credit cards, or have questions about the annual self-assessment process, please contact Mark McCulloch (6-6249).

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists-prod.uoregon.edu/pipermail/bao-news/attachments/20131028/47986d4e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Annual_Merchant_Self_Assessement_Announcement_2013.pdf
Type: application/pdf
Size: 223157 bytes
Desc: Annual_Merchant_Self_Assessement_Announcement_2013.pdf
URL: <http://lists-prod.uoregon.edu/pipermail/bao-news/attachments/20131028/47986d4e/attachment.pdf>