Compliance Team

RIT PCI Team

Provides operational oversight of RIT's payment card environment.

Members:

  • Information Security Office (ISO)
  • Information & Technology Services (ITS)
  • Controller's Office
  • Student Auxiliary Services
  • Student Financial Services

Responsibilities:

  • Assists business units with Self-Assessment Questionnaires (SAQ A and SAQ B)
  • Approves payment devices
  • Validates vendor compliance

RIT Card Payment Solutions

RIT Card Payment Scenarios and Recommended Solutions

Business Scenario              Recommended Payment Method       Recommended Terminal/POS              Vendor Option                          
Ecommerce  Hosted Page (Redirect) None  Nelnet 
In Person Countertop 

P2PE Terminals or M&T 
provided terminal

 Bluefin, Freedom Pay, etc.
Virtual Terminal Mail-order and telephone
payments (MOTO)		 Dedicated device (P2PE)  PCI Validated Vendor 

 

RIT PCI Process Matrix

RIT PCI Internal Process Matrix

Requirements Responsible Party Frequency
RIT Attestation ISO/Controller’s Office/
Business Units 		 Annually  
Device Inventory Business Units Twice a year             
SAQ Completion Controller’s Office/ ISO  Annually
PCI Training Completion          Business Units   Annually 
Vulnerability Scans Third Party/ ISO  Quarterly 
Device Tamper Checks  Business Units Regularly
Vendor’s Attestation of
Compliance (AoC)
Reports 		 Business Units   Annually 

Additional Files