CREDIT CARD PAYMENT IT INITIATIVE. The Usual Suspects. Payment Process. Need to know the Source: Where the charge came from. Cybersource OR Other Authorized Gateway - Merchant Link - BlackBoard - etc…. Need to create a Cybersource Account. Shopping Cart Functions.
Payment Process Need to know the Source: Where the charge came from Cybersource OR Other Authorized Gateway - Merchant Link - BlackBoard - etc… Need to create a Cybersource Account Shopping Cart Functions Option 1: One Cybersource account per Event or Unit Customized Receipt and Identification in Credit Card Statement Look & FeelLogos and Headers Product Diversity Authorization: Auto or Manual Settle Option 2: One Cybersource account for whole campus A central e-commerce solution that: Handles security and vulnerability scans Is Customizable Puts up “products” in a timely manner Allows for data collection Integrates with Bursar accounts and KFS accounts Has log management Secure & PCI Compliant
From Meeting #3 Feb. 5, 2013 Estimated 80 SAQ A Merchants Option 1 from Slide 1 Option 2 from Slide 1 Etc… Dept2Website Dept3website Dept1Website 6 site1 2 5 3 4 Common DRUPAL Codebase E-Commerce ServiceCentral Shopping Cart 1 Payment Gateway / 1 Cybersource Account for Campus DB4 etc DB1 DB2 DB3 1 Cybersource Accountper Department or Website Distribute to KUALI Accountsvia Reports
After Meetings 4 & 5; Recommended Solutions: Option 1: Use 3rd Party PCI Compliant service -SAQA Merchants Only Etc… Dept2Website Dept3website Dept1Website PCI Scanning may not be required for these servers if payment gateway is not ours 3rd Party PCI-Compliant E-Commerce Service (s) RegOnline, 3DCart, etc. Check mailed back to department from RegOnline Cybersource or Other Payment Gateways – Per Department or Event Distribute to KUALI Accounts
After Meetings 4 & 5; Recommended Solutions: Option 2: Use 3rd “E-Commerce in a Box” -SAQA Merchants Only Etc… Dept2Website Dept3website Dept1Website PCI Scanning not required for these servers (TBD) E-Commerce in a Box from UITS – PCI-compliant merchant service(coming soon) Cybersource or Other Payment Gateways – Per Department or Event Distribute to KUALI Accounts
Anticipated Gains $$$ Annual Savings Reduced Institutional Risk Increased Collaboration based on common solutions Increased Efficiencies Still Needed: RegOnline account management process (Bursar Ofc. coordinating) e-Commerce in a box (UITS)
CREDIT CARD PAYMENT IT INITIATIVE THANK YOU!! QUESTIONS & DISCUSSION