Re: PCI Processing Practices

[Angela L Embree <angela.embree () DRAKE EDU>]

Drake started off doing our own processing and have been for the few years.  But the PCI-DSS work required for both IT 
and Finance is driving us to look at outsourcing.  We have recently had discussions with Sallie Mae and TouchNet.  Our 
end goal  is to outsource 100% of credit card processing and which will reduce the workload a great deal.  Please let 
me know if you would like more info.

Angela Embree
Director of Computer Information Systems
Drake University

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Paula E. 
Johnson
Sent: Friday, September 30, 2011 1:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] PCI Processing Practices

We are reviewing our campus PCI processing practices and are curious how many of you have decided to do your own credit 
card processing and how may have decided to totally outsource this sort of transaction.  Can you please respond with 
whether you satisfy your PCI needs internally, outsourced, or a combination.
Thanks in advance for your help.

Paula E. Johnson
Fiscal Support Supervisor
IT Services
University of Arkansas
Fayetteville, AR 72701
479-575-5870