Re: PCI DSS compliance challenges

[Gary Flynn <flynngn () JMU EDU>]

Basgen, Brian wrote:
> Hi Everyone,
>
>  Our Finance department has been considering a new model of handling credit cards on our campuses that would involve 
> cashiering stations that track credit card data through a desktop PC and send it over the internet.
>
>  The interesting challenge for this model is complying with the PCI DSS. Our perception is that these kinds of 
> deployments are becoming fairly common in higher-ed, so it would be interesting to hear the experiences of some other 
> institutions with DSS. Are you segregating card holder data networks? What IT cost was incurred to setup a compliant 
> environment for deployments your institution has done?
>
>  I welcome any responses on or off list. Thanks! :)


I don't have an immediate answer for you but wanted to say
a group of us met just this morning to discuss this very
issue.

--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature