Fact Sheet

• All Penn State credit card merchants are required to become PCI compliant.
• After determining the infrastructure needs to become compliant, areas must react immediately and plan for on-going compliance in their budget planning cycles.
• After PCI compliance is obtained, merchants must validate compliance through:
  • Quarterly Network Scans.
  • Regular internal vulnerability scans.
  • Annual completion of the Annual Self-Assessment Questionnaire.
• Security incidents must be reported to Security Operations and Services (SOS): 814.863.9533 or after-hours 814.777.9533 | security@psu.edu.
• Machines being used for processing, storing or transmitting cardholder information must be segmented from the rest of the network. Contact the IPAS team for a full listing of specifications.