Educause Security Discussion mailing list archives

Re: VISA Net audit?


From: Mike Iglesias <iglesias () DRACO ACS UCI EDU>
Date: Fri, 3 Jun 2005 15:56:12 -0700

 Like others who have written, we're taking this as a serious
deadline.  Most of our processing is outsourced -- we never see the
transaction.  But the Bank wants us to be compliant, and we're passing
that requirement on to those to whom we've outsourced.  We think
Verisign is probably already on the Visa list of compliant
organizations.  We're not so sure about the "CowboyCardServices"
company that one of our offices chose to use.  At least the requirement
caused us to lift up the rug and see what was crawling around down
there! :-)

The Univ of California got Visa/Mastercard to agree to a reduced set
of requirements for merchants that use a third-party to process
credit card payments.  You might try to do the same.


Mike Iglesias                          Email:       iglesias () draco acs uci edu
University of California, Irvine       phone:       949-824-6926
Network & Academic Computing Services  FAX:         949-824-2069

Current thread: