Re: PCI keeping it simple

["Haselhoff, Brent" <brent.haselhoff () WKU EDU>]

We don't use it, but it has more to do with the way they process payments than the security of their device.  It looks 
like they employ E2EE, and we allow other E2EE enabled devices on our regular client network.  
https://squareup.com/townsquare/end-to-end-encryption

Brent Haselhoff
Manager, IT Security and Identity Management
Western Kentucky University
brent.haselhoff () wku edu<mailto:brent.haselhoff () wku edu>
270-745-2012

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Yost, Davis
Sent: Tuesday, April 23, 2019 3:03 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] PCI keeping it simple

** This message originated from outside WKU. Always use caution following links. **
Question:

So, I was just asked how is this different then the devices that our one card vendor sells us?

https://squareup.com/help/us/en/article/3797-secure-data-encryption

Is anyone allowing or using Square on their administration production network?

Thoughts??

Thank you,

Davis Yost
Associate Director, Information Technology Security
yost () northwood edu<mailto:yost () northwood edu>

989.837.4185 office
989.837.4184 fax
Developing Leaders of a Global Free-Enterprise