Re: PCI Compliance Policies

[Theresa M Rowe <rowe () OAKLAND EDU>]

One core policy we have is at:

http://www2.oakland.edu/audit/POLCY212.HTM

We also have an information security policy update in progress that isn't ready to share.  There's also network and 
system policies.

Is ANYONE going to be compliant by the September deadline??  Did you use a consultant to get there?

---- Original message ----
> Date: Thu, 19 Jul 2007 10:35:19 -0500
> From: "Sandford, Doug" <doug () UA EDU>
> Subject: [SECURITY] PCI Compliance Policies
> To: SECURITY () LISTSERV EDUCAUSE EDU
>
> Has anyone developed policies related to the process of becoming PCI
> compliant? Or perhaps links to some sources that have already been
> developed? Not having to re-invent the wheel would speed the
> certification process considerably.
>
> Thanks in advance.....
>
> Doug Sandford
> University of Alabama
> Office of Information Technology
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services