
<p>Departmental PCI-DSS Requirements Checklist</p><p>No Description Yes No Notes 1 Complete Annual SAQ Verification 2 Complete and Sign the SAQ 3 Review, Update and Upload Departmental Policies and Procedures 4 Review and Upload Copies of Third- Party Agreements (if applicable) 5 Review and Upload Copies of Third- Party Certifications (if applicable) 6 Complete Annual PCI Training Departmental Checklist (Details)</p><p>1. Complete Annual SAQ Verification 1. Based on the following questions, what SAQ (Self-Assessment Questionnaire) category do you belong to? SAQ ______1. SAQ A: Card-not-present (e-commerce or mail/telephone-order) merchants, all cardholder data functions outsourced. This would never apply to face-to- face merchants. 2. SAQ B: Imprint-only merchants with no electronic cardholder data storage, or standalone, dial-out terminal merchants with no electronic cardholder data storage 3. SAQ C-VT: Merchants using only web-based virtual terminals, no electronic cardholder data storage 4. SAQ C: Merchants with payment application systems connected to the Internet, no electronic cardholder data storage 5. SAQ D: All other merchants (not included in descriptions for SAQs A through C above) and all service providers defined by a payment brand as eligible to complete an SAQ. 2. Complete the SAQ online 1. Fill out your department's appropriate SAQ: 3. Review, Update and Upload Departmental Policies and Procedures 1. Departmental Policies and Procedures related to processing payment card transactions must be reviewed and updated annually. 2. Upload the current versions of the policies and procedures to the SAQ submission site. 4. Review and Upload Copies of Third-Party Agreements 1. Upload the current version of any third-party agreements to the SAQ submission site. 5. Review and Upload Copies of Third-Party Certifications 1. Upload the current version of any third-party certifications, showing their compliance, to the SAQ submission site. 6. Complete Annual PCI Training 1. Anyone processing payment cards must attend training annually. Please go to this on the link to complete training: https://riceuniversity.co1.qualtrics.com/SE/? SID=SV_9GHf9h0NJ2yWynX</p>
Details
-
File Typepdf
-
Upload Time-
-
Content LanguagesEnglish
-
Upload UserAnonymous/Not logged-in
-
File Pages2 Page
-
File Size-