New Hire

The University, as an employer, must comply with the PCI Security Standard for accepting debit/credit card payments, by implementing and adhering to PCI-DSS requirements for the protection of cardholder data.

Requirements:

Employee Background Check

New Hires (in all employee groups) for University positions with duties and responsibilities that include access to cardholder account data, must agree to a pre-hire background check prior to receiving an official offer for employment and reporting for work. “Access to cardholder account data” refers specifically to having access to such data on paper or in electronic formats. Payment card security sensitive positions are those with restricted access to multiple instances of cardholder data at any point in time. Thus, a cashier position that would process a payment card transaction one card at a time would not be included in the employee background check requirement. Background checks for employees whose access is limited to single card numbers at any one time are a recommendation not a requirement. However, a position that provides access to system or summary reports containing multiple cardholder information would be included. Therefore, units must coordinate with their Campus/Central HR office to ensure that the background check is included for all positions as required in publicly advertised position postings and noted in the job position description.

Training

University of Illinois employees handling card data related to their job duties such as, processing card transactions, reconciling transaction activity, access to cardholder data on paper or electronic, and reports are required to complete the Payment Card Data Security Training upon hire.

ALL employees are required to complete the payment card data security awareness training and review the policy and procedures annually. Merchant Card Services will send a training announcement notification for the departments to complete online training annually.

If you have questions, please contact us and visit our Training Resources.

Last Updated: May 3, 2010