category:

PCI DSS

Article

A Roadmap for Replacing PTS 3.0 Devices

The PCI Council strongly recommends, but does not require, that merchants use approved PTS devices. However, this can be a requirement from the various card brands in order to protect against fraud and ensure the secure entry and transmission of account data.

PCI DSS
Read More about the A Roadmap for Replacing PTS 3.0 Devices
Article

Incident Response: Key Players in a Tabletop Exercise

Gathering everyone in one room for a discussion-based tabletop exercise can be a good way to test your plan and verify that all appropriate staff members understand their individual roles and responsibilities.

Incident Response
Tabletop Exercise Key Players about the Incident Response: Key Players in a Tabletop Exercise
Article

Virtual Cards: In or Out of PCI Scope?

Everyone knows that standard payment card information must be protected according to the PCI DSS, but what about virtual cards? Is this information also in scope for PCI?

PCI DSS
Read More about the Virtual Cards: In or Out of PCI Scope?
Article

Switching Merchant Services Banks

Changing your merchant services bank can be an overwhelming process for campus-based organizations due to the significant number of merchants and locations, and the diverse range of payment processes that have been implemented. Here are several key factors that should be considered as part of your decision.

Payments & Treasury Solutions
Read More about the Switching Merchant Services Banks
Webinar

PCI Compliance for Washington State Board of Community and Technical Colleges

Discover how CampusGuard partnered with WSBCTC to provide PCI security risk management, audit, and penetration testing for all members of the Washington Institutions of Public Higher Education.

PCI DSS
PCI Compliance for WSBCTC about the PCI Compliance for Washington State Board of Community and Technical Colleges
Article

Balancing 3rd Party PCI Compliance

The use of third-party vendors within your organization alters the scope of your PCI DSS Compliance. Determining your responsibilities within that scope is the only way to achieve and maintain compliance.

PCI DSS
Third-Party Management about the Balancing 3rd Party PCI Compliance
Article

PCI DSS: VoIP Guidance

If you have merchants accepting cardholder data over a VoIP telephone, this can unfortunately expand your organization’s PCI DSS scope. Learn what impact this will have on your PCI compliance program.

PCI DSS
Read More about the PCI DSS: VoIP Guidance
Article

Third-Party Service Provider AoCs

Requirement 12 of the PCI DSS can be found in all of the SAQs and focuses primarily on the policies and procedures each merchant should have in place, as well as the requirements for monitoring any third-party service providers that may be involved in the payment card process.

PCI DSS
Read More about the Third-Party Service Provider AoCs
Article

NIST SP 800-171 Framework Series: Personnel Security

Part 9 of CampusGuard’s series covers each of the critical controls from NIST SP 800-171 rev.2 When performing IT security assessments, part of the engagement planning process includes providing the security committee with a list of all suggested departments and individuals that should be included in the assessment interviews.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Personnel Security