ULTIMATE RETAIL PAYMENTS FIELD GUIDE Everything Merchants Need to Know from Those in the Know YOUR ULTIMATE GUIDE
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
The Benefits of Electronic Payments in the Canadian Economy a White Paper Prepared by IHS Global Insight and Visa Canada
The BenefiTs of elecTronic PaymenTs in The canadian economy A White Paper Prepared by IHS Global Insight and Visa Canada tHIrd edItIon editor’s note The Benefits of electronic Payments in the canadian economy, Third edition is a white paper designed to explore the social and economic benefits of electronic payments to the Canadian economy. Commissioned by Visa Canada, a wholly owned subsidiary of Visa Inc., this white paper is based on research conducted by IHS Global Insight, an econometric forecasting agency. For more details on IHS Global Insight’s methodology, please refer to the Methodology Appendix. Third Edition - 2012 Table of contents executive summary 2 electronic Payments in canada 4 Benefits to Consumers and Merchants Usage Trends in Canada The Big Picture 7 The Macroeconomic Value of Electronic Payments in Canada Electronic Payments in a Global Context Working with Governments to Increase Efficiency inbound Travel To canada: The impact of electronic Payments on Travel and Tourism 11 The efficient enterprise: The impact of electronic Payments on canadian Business 14 everything Within reach: The impact of electronic Payments on the digital economy 16 Protecting the system 17 Payment Card Industry Chip Technology conclusion 18 Visa: advancing the future of electronic Payments 19 Ways to Pay The Foundation for Innovation Visa Invests in the Security of the System Visa: a responsible Partner 23 Ensuring Financial Literacy executive summary over the last decade, Canada has benefited from strong • enhancing economic transparency and reducing the economic foundations: our highly-skilled workforce, “grey economy” of underreported cash transactions. modern infrastructure, natural resources, disciplined • Broadening participation and inclusion in financial financial system, and technological innovation have all services. -
Payment Card Industry Policy
Payment Card Industry Policy POLICY STATEMENT Palmer College of Chiropractic (College) supports the acceptance of credit cards as payment for goods and/or services and is committed to management of its payment card processes in a manner that protects customer information; complies with data security standards required by the payment card industry; and other applicable law(s). As such, the College requires all individuals who handle, process, support or manage payment card transactions received by the College to comply with current Payment Card Industry (PCI) Data Security Standards (DSS), this policy and associated processes. PURPOSE This Payment Card Policy (Policy) establishes and describes the College’s expectations regarding the protection of customer cardholder data in order to protect the College from a cardholder breach in accordance with PCI (Payment Card Industry) DSS (Data Security Standards). SCOPE This Policy applies to the entire College community, which is defined as including the Davenport campus (Palmer College Foundation, d/b/a Palmer College of Chiropractic), West campus (Palmer College of Chiropractic West) and Florida campus (Palmer College Foundation, Inc., d/b/a Palmer College of Chiropractic Florida) and any other person(s), groups or organizations affiliated with any Palmer campus. DEFINITIONS For the purposes of this Policy, the following terms shall be defined as noted below: 1. The term “College” refers to Palmer College of Chiropractic, including operations on the Davenport campus, West campus and Florida campus. 2. The term “Cardholder data” refers to more than the last four digits of a customer’s 16- digit payment card number, cardholder name, expiration date, CVV2/CVV or PIN. -
Maintaining PCI Compliance Through Innovation
February 2018 Maintaining PCI Compliance Through Innovation An article by Angela K. Hipsher-Williams, CISA, QSA, and Jonathan J. Sharpe, CISA, QSA Audit / Tax / Advisory / Risk / Performance Smart decisions. Lasting value.™ Maintaining PCI Compliance Through Innovation The ascendance of online retailers and mobile ordering has created a hypercompetitive environment for purveyors of consumer products and services. Customers today expect a frictionless, “endless aisle” ordering experience, where any item they can think of is instantly orderable, if not instantly accessible. Customers’ demand for instant gratification PCI Compliance is not limited to the online environment. Traditional retailers and restaurants are Stricter Than Ever thus being forced to innovate in a variety While new payment solutions offer flexibility of ways to try to replicate the online and convenience for patrons, these customer experience. Particularly ripe innovations have security and compliance for innovation is the process of ordering implications for merchants and customers and paying for goods and services, alike. Recent large-scale payment card but payment innovations come with breaches have laid bare some of the a number of pitfalls when it comes to risks, and in response, PCI compliance payment card industry (PCI) compliance. requirements have become stricter than ever. Organizations must fully evaluate the implications of implementing new payment technologies, weighing convenience against cybersecurity risk. Devoting adequate resources to data security and -
PAYMENTS DICTIONARY Terms Worth Knowing
PAYMENTS DICTIONARY Terms worth knowing 1 Table of contents Terms to put on your radar Terms to put on your radar ..............................3 Card not present (CNP) Card acceptance terms ....................................4 Transaction in which merchant honors the account number associated with a card account and does not see or swipe Chargeback terms ..........................................7 a physical card or obtain the account holder’s signature. International payment terms ...........................8 Customer lifetime value Prediction of the net profit attributed to the Fraud & security terms ....................................9 entire future relationship with a customer. Integrated payment technology terms ............ 12 Omnicommerce Retailing strategy concentrated on a seamless consumer Mobile payment terms ................................... 13 experience through all available shopping channels. Payment types .............................................. 15 Payments intelligence The ability to better know and understand Payment processing terms ............................. 18 customers through data and information uncovered from the way they choose to pay. Regulatory & financial terms .......................... 23 Transaction terms ......................................... 25 Index ........................................................... 27 References ................................................... 31 2 3 Card acceptance terms Acceptance marks Credit card number Merchant bank Sub-merchant Signifies which payment -
Brazilian Charge Cards
® THE MOST POPULAR CREDIT CARDS USED FOR PRODUCT PURCHASES IN BRAZIL Credit cards are a major payment method for online purchases in Brazil including the Brazilian brands Aura and Hipercard. However, credit cards issued in Brazil, even Visa's and MasterCard's, are often restricted to local purchases in Brazil. With Alternative Payments, you can reach this market by accepting these local payment methods. Hipercard is a credit card with its own brand. Controlled by Itau, Hipercard is popular in the North- east and South of Brazil, with 470 thousand accredited establishments and more than 13 million cards issued in 2010. It was initially created as a loyalty card for Bompreço grocery stores in Recife back in 1969. Its expansion started in Recife in 1991, when its name was changed to Hipercard and by 1993 it was fully operating as a credit card. This expansion turned Hipercard into the first store card to be accepted by other commercial establishments as a credit card. In 2004, it was acquired by Unibanco, which now belongs to Itau. Through its partnership with merchant acquirer Redecard it is accepted in more than six thousand commercial establishments. Hipercard started as a private label credit card company for the Bompreço chain of supermarkets and is now an independent credit card company and one of the most popular Brazilian online payment method. Cetelem (BNP Paribas) is one of larger Aura credit card issuers, who has entered into a partnership with MasterCard for Aura-MasterCard co-branded cards. Currently there are over 3 million co-branded Aura cards in Brazil. -
Alternative Internet Payments Outside the Banking System
Journal of Economic Crime Management Fall 2002 Volume 1, Issue 2 The Risk of Alternative Internet Payments Susan Lynch, Director of Financial Solutions Searchspace Abstract Alternative Internet Payment systems have been created as an option for consumers to use instead of credit cards, debit cards and checks while conducting electronic commerce on the web. Developed to mimic paper cash systems, alternative payments are identified by a variety of names such as: electronic currencies, cyber payments, Internet dollars, digital currency, etc. The companies that offer the service promote the ability to transfer value (typically through e-mail), anonymously between people and /or businesses through private closed networks. Many of the providers are located outside the United States; those in the US have expanded to allow international transfers. Because the networks are private and do not utilize the traditional federally insured banking systems to move funds, they do not have to comply with government regulatory policies such as the Bank Secrecy Act. The ability to transfer value anonymously has attracted the attention of government regulators as well as law enforcement agencies. The concern is that the methodology is yet another avenue to move funds for a potentially criminal enterprise. This article will identify the risks and make recommendations to mitigate the exposure to unlawful activity. Introduction “Money in the 21st century will surely prove to be as different from the money of the current century as our money is from that of the previous century…Electronically initiated debits and credits will become the dominant payment mode, creating the potential for private money to compete with government –issued currencies.” – Jerry L. -
Demystifying Pci Dss Liability
CLIENT ADVISORY DEMYSTIFYING PCI DSS LIABILITY YOU CAN OUTSOURCE CREDIT CARD PROCESSING BUT NOT LIABILITY! Many business owners have misconceptions about their obligations and legal exposures if they experience a breach of payment card data. Outsourcing your company’s payment card processing to a third-party does not mean you have also outsourced the risk you take on when you accept payments by credit card. Companies are still subject to the PCI DSS - Payment Card Industry Data Security Standards – and any failure to comply with PCI DSS will expose your company to a wide range of potentially significant liabilities in the event of a breach. WHAT IS PCI DSS? Created by the five payment brands (American Express, Discover Financial Services, JCB International, Mastercard, and Visa, Inc.), PCI DSS stands for the Payment Card Industry Data Security Standards. While not de facto law, the Security Standards are technical requirements that govern the appropriate security posture for any entity who stores, processes, and/or transmits cardholder information.1 MERCHANT SERVICE AGREEMENTS A Merchant Service Agreement is the contract between a company that wishes to accept credit cards as payment for services and an acquiring bank DON’T MAKE ASSUMPTIONS or other institution that sets forth the terms and conditions under which the WHEN IT COMES TO LIABILITY… company can accept and process payment card transactions. Using a Payment Check your contracts! Processing company may simplify the point of sale process, but it does not Check your policy! absolve a retail merchant of the responsibilities assigned to it by the terms and conditions of its agreement. -
United Way Worldwide Guide to Payment Card Industry Compliance
United Way Worldwide Guide to Payment Card Industry Compliance Common Acronyms Appearing in this Document ASV Approved Scanning Vendor CVV Card Verification Value FIC Financial Issues Committee IP Internet Protocol IT Information Technology LAN Local Area Network MID Merchant Identification Number PCI Payment Card Industry PCI DSS Payment Card Industry’s Data Security Standards PCI SSC Payment Card Industry Security Standards Council QSA Qualified Security Assessor SAQ Self-Assessment Questionnaire Approved by the United Way Financial Issues Committee – March 2013 © Copyright 2013 – United Way Worldwide 2013 United Way Worldwide member organizations may make unlimited copies for their own internal purposes, provided the copyright attribution – “Copyright United Way Worldwide 2013” – is retained on materials reproduced. No modification or reproduction by non-United Way members is permitted without prior written approval. 2 Table of Contents United Way Guide to PCI Compliance – Executive Summary ........................................................ 4 Defining PCI Data Security Standards and PCI Security Standards Council .................................. 6 Benefits of PCI Compliance ............................................................................................................ 7 Reputation Risk of Non-Compliance ......................................................................................... 7 Financial Risk of Non-Compliance ........................................................................................... -
Implementation Guide Payment Card Industry Data Security Standard
Implementation Guide Payment Card Industry Data Security Standard 1 Table of Contents Introduction .............................................................................................................................................................................. 4 Terminology Used in this Guide .............................................................................................................................................. 5 Table 1: Summary of PCI DSS Requirements ......................................................................................................................... 6 Building and Maintaining a Secure Network ......................................................................................................................... 10 Remote Network Access .................................................................................................................................................... 10 Wireless Networks ............................................................................................................................................................. 11 Using Firewalls .................................................................................................................................................................. 12 Firewalls and Intuit QuickBooks Cash Register Plus ........................................................................................................ 12 Protecting Cardholder Data ................................................................................................................................................... -
Miami Dade County Payment Card Industry Executive Charter and Compliance Policy Number 332
Miami Dade County Payment Card Industry Executive Charter and Compliance Policy 332 Updated: 01/01/2021 Miami Dade County Payment Card Industry Executive Charter and Compliance Policy Number 332 Revisions to Policy: This section documents the revisions made to this policy since the last approved version dated October 2019. Effective Date Version Description Pages October 2019 332.1.0 General grammatical changes January 2021 332.2.0 Added Applicable Policies 9 and Procedures and required training General grammatical 4,6,8,9,10,11,14,17,18,20,21 changes 1 Miami Dade County Payment Card Industry Executive Charter and Compliance Policy Number 332 Table of Contents I. Purpose …………………………………………………………………………………….......4 II. Overview.…………………………………………………………………………………….....4 III. Definitions.………………………………………………………………………………....….5 IV. Accountability….……………………………………………………………………….…….7 V. Applicability.………………………………………………………………….………....…...7 VI. Goals and Applicable Policies and Standards.………………………………....8 A. Goals…………...………………………………………………………………..……….....8 B. Applicable Policies and Procedures…………………..…………..…………...9 C. Required Information Security Training...………..………………..………..9 VII. Roles and Responsibilities.………………………………………………………….…..9 A. Departments.………………………………………………………………..……….....9 B. Department’s PCI Liaison.………………………………..…………..………….10 C. Internal Services.…………………………………………..………………..……….11 D. Finance..………………………………………………..…………………..………......12 E. Information Technology.……………………………………………………...…13 VIII. PCI Compliance Measures of Success….…………………………………..……14 -
Qualification Requirements
Payment Card Industry (PCI) Data Security Standard Qualification Requirements For Qualified Security Assessors (QSA) Version 2.0 June 2015 Document Changes Date Version Description October 2008 1.2 To align version number with PCI DSS v1.2; no other changes made. May 2015 2.0 . Made various grammar improvements; aligned terminology with PCI DSS v3.1 . Increased Violation period to three (3) years . Clarified QSA Company and Employee qualification requirements . Enhanced Business Legitimacy requirements . Enhanced separation of duties, independence, and conflict of interest requirements . Clarified regional requirements . Clarified subcontracting vs. partnership with active QSA Company . Enhanced QSA Employee skills and experience requirements . Added PCI SSC Code of Professional Responsibility . Enhanced background check requirements . Enhanced QSA Company internal quality assurance requirements . Enhanced Evidence (Assessment workpaper) retention requirements . Added Security Incident Response . Enhanced annual requalification requirements . Enhanced Assessor Quality Management process: QSA Audit, Quality Remediation and Revocation process . Updated the QSA Agreement (Appendix A) . Updated insurance requirements (Appendix B) . Added QSA Company application (Appendix C) . Added QSA Employee application (Appendix D) PCI DSS Qualification Requirements for Qualified Security Assessors v2.0 June 2015 Copyright © 2008–2015 PCI Security Standards Council, LLC. All Rights Reserved. Page ii Table of Contents Document Changes ................................................................................................................................... -
Awareness Training
AWARENESS TRAINING IS THIS COURSE RIGHT FOR YOU OR YOUR STAFF? The PCI Awareness training course outlines the challenges surrounding payment card security at a high level and explains what the PCI Standards do to mitigate these issues. Let us help you decide – simply answer these few questions... WHAT’S IN IT FOR YOU? Do you want to: Understand how improved security leads to PCI Control costs and gain Understand PCI compliance Drive PCI DSS compliance compliance tangible, real-world insights before you complete a Self- across your business Build your knowledge of on best practices Assessment Questionnaire the Payment Card Industry (SAQ) or go through an Data Security Standard assessment with a QSA (PCI DSS) Obtain tools to build WHO SHOULD ATTEND? a secure payments Geared to a broad audience including executives, managers, as well as staff who are environment affected by PCI compliance requirements, this course is for anyone interested in learning more about the Payment Card Industry, with a focus on those individuals working for organizations that must be compliant with PCI DSS. If you answered YES to any of the Typical job titles include but are not limited to: above, then the PCI Awareness Audit Manager, Business Analyst, Compliance Officer, Credit Analyst, Finance Manager, course is for you – or for your staff! IS Manager, IT Specialist, Project/Program Manager, Risk Management Analyst, Security Read on! Analyst, Senior Developer, Software Engineer, System Administrator, Web Master PEOPLE ARE TALKING Here’s what others have to say about WHAT’S COVERED IN THE COURSE? their experience: This course helps to improve security, reduce the risk of data loss, and simplify meeting PCI requirements.