Departments interested in processing credit cards should refer to credit card procedures and guidelines.
Financial Services Operations
Credit Card Processing
Policy on Accepting and Handling Credit Cards to Conduct University Business
Brown's policy on Accepting and Handling Payment Cards to Conduct University Business ensures that all University departments that accept and process credit and debit card payments, do so in compliance with payment card industry standards, and in accordance with other University procedures.
Departments at Brown University must seek approval from Financial Services and the Commerce Committee to accept credit card payments. Compliance with PCI-DSS standards is mandatory for handling credit card data.
The Payment Card Industry (PCI) Security Standards Council developed a set of financial and information technology standards to protect credit cardholder's data. These standards govern all merchants and organizations that collect, process, store, or transmit credit card information.
The Payment Card Security Incident Response Plan outlines the key roles and responsibilities, requirements, and communication strategies in the event of any suspected or confirmed compromise or data breach with regards to hardware and/or software used for processing or transmitting credit card transactions.