home | general information | phases of ipas project

Phases of the IPAS Project

Phase I [Link to Project Plan Summary, Phase I]

Meet the requirements of Payment Card Industry Data.

• Security Standard (PCI DSS).
• Provide awareness training.
• Examine the current network structure of credit card merchants.
• Provide security testing and assessment.
• Conduct gap analysis.
• Provide assistance in meeting PCI DSS compliance.
• Prepare and educate for the on-going compliance process.

Phase II [Link to Project Plan Summary, Phase II]

Enhance the privacy and security of Penn State institutional information. Special emphasis will be on units regulated under HIPAA, FERPA, GLBA and other areas that contain, access or process sensitive and confidential information.

• Develop a University-wide information privacy strategy.
• Implement effective compliance and enforcement initiatives.
• Provide compliance and on-going professional development training to IT staff and users of sensitive information.

Working Group: The IPAS Working Group Committee was formed to assist with IPAS-related initiatives. Learn more about the Working Group, subcommittee initiatives and membership.