Difference between revisions of "ProDon:FAQ - PCI Standards"
m (→Questions / Answers) |
|||
| Line 8: | Line 8: | ||
<br> | <br> | ||
| − | <div style="left: 689.283px; top: 92.8px; display: none; | + | <div class="skype_c2c_menu_container" id="skype_c2c_menu_container" style="left: 689.283px; top: 92.8px; display: none;"><div class="skype_c2c_menu_click2call">[[Skype: 18197580560?call&origin=FFTB/SPNR/7.1.15383.6004/http://update wikien.logilys.com/extensions/FCKeditor/fckeditor/editor/fckeditor.html|Call]]</div><div class="skype_c2c_menu_click2sms">[[Skype: 18197580560?sms&origin=FFTB/SPNR/7.1.15383.6004/http://update wikien.logilys.com/extensions/FCKeditor/fckeditor/editor/fckeditor.html|Send SMS]]</div><div class="skype_c2c_menu_add2skype">[[Skype: 18197580560?add&origin=FFTB/SPNR/7.1.15383.6004/http://update wikien.logilys.com/extensions/FCKeditor/fckeditor/editor/fckeditor.html|Add to Skype]]</div><div class="skype_c2c_menu_toll_info"><span class="skype_c2c_menu_toll_callcredit">You'll need Skype Credit</span><span class="skype_c2c_menu_toll_free">Free via Skype</span></div></div> |
== Questions / Answers == | == Questions / Answers == | ||
| − | Q. What are the PCI standards?<br>A. PCI stands for ''Payment Card Industry''.Those are the security regulations related to the data manipulation of the transactions made with credit cards, in order to prevent fraud.<br> <br>Q. Do we have to comply with the PCI standards if we have a merchant account with ''Netbanx ( | + | Q. What are the PCI standards?<br>A. PCI stands for ''Payment Card Industry''.Those are the security regulations related to the data manipulation of the transactions made with credit cards, in order to prevent fraud.<br> <br>Q. Do we have to comply with the PCI standards if we have a merchant account with ''Netbanx (PaySafe)''? |
A. Yes, you do. Any merchant who accepts transactions (donations or payments) by credit cards must comply with the PCI standards. | A. Yes, you do. Any merchant who accepts transactions (donations or payments) by credit cards must comply with the PCI standards. | ||
| Line 25: | Line 25: | ||
Q. Is it normal to be asked to complete the "SAQ C" form? | Q. Is it normal to be asked to complete the "SAQ C" form? | ||
| − | A. Yes, it is. Since you accept phone or mail donations (reply coupon), you see and | + | A. Yes, it is. Since you accept phone or mail donations (reply coupon), you see and handle credit card numbers. The "SAQ C" form is a little more complete than the one mentioned in the previous question. The aim is to ensure ''PaySafe'' that your methods are secure when it comes to handling the credit card data to be entered in the virtual terminal. |
<br> | <br> | ||
| Line 31: | Line 31: | ||
Q. Is it normal to be asked to complete the "SAQ D" form? | Q. Is it normal to be asked to complete the "SAQ D" form? | ||
| − | A. Only if you keep credit card numbers electronically (e.g. by email or in an ''Excel ''spreadsheet). However, this method is to be avoided | + | A. Only if you keep credit card numbers electronically (e.g. by email or in an ''Excel ''spreadsheet). However, this method is to be avoided because it exposes you to great risks of fraud and implies major security constraints. It is the most complex form to complete. |
<br> | <br> | ||
| − | Q. We have | + | Q. We have a ''PaySafe'' account as well as the Online Donation Module (''IMakeAnOnlineDonation''). Are the credit card data saved on your website? |
| − | A. No, | + | A. No, they are not. The payment data are kept in a secure vault at ''Netbanx'' and cannot be recovered, neither by you, nor by ''IMakeAnOnlineDonation''. |
<br> | <br> | ||
| − | Q. We have | + | Q. We have a ''PaySafe'' account as well as the Electronic Transactions Module (virtual terminal). Are the credit card data saved in ''ProDon''? |
| − | A. No, | + | A. No, they are not. The payment data are kept in a secure vault at ''Netbanx'' and cannot be recovered, neither by you, nor by ''ProDon''. |
<br> | <br> | ||
| Line 51: | Line 51: | ||
A. Only for the "LIST ALL THIRD PARTY SERVICE PROVIDERS (Leave blank if not applicable)" section. Here is the information you need to enter: | A. Only for the "LIST ALL THIRD PARTY SERVICE PROVIDERS (Leave blank if not applicable)" section. Here is the information you need to enter: | ||
| − | *Payment Gateway: "''Netbanx- | + | *Payment Gateway: "''Netbanx-PaySafe''" |
*Point-of-Sale Terminal: N/A | *Point-of-Sale Terminal: N/A | ||
*Web Host: You must enter the name of your organization's website host | *Web Host: You must enter the name of your organization's website host | ||
| Line 58: | Line 58: | ||
*Co-Location: N/A | *Co-Location: N/A | ||
| − | All the other questions on those questionnaires are related to the IT security implemented in your organization and on the workstations hosting ''ProDon''. Since we do not know this environment and do not have any expertise with the PCI standards, we are not able to assist you any further. | + | All the other questions on those questionnaires are related to the IT security implemented in your organization and on the workstations hosting ''ProDon''. Since we do not know this environment and do not have any expertise with the PCI standards, we are not able to assist you any further. |
| − | However, feel free to contact us | + | However, feel free to contact us with any questions related to ''IMakeAnOnlineDonation ''or ''ProDon''. <br> |
<br> | <br> | ||
| Line 66: | Line 66: | ||
Q. Who is ''Security Metrics''? | Q. Who is ''Security Metrics''? | ||
| − | A. ''Security Metrics'' is a certified firm, specializing in the management of all aspects related to the PCI standards compliance, recommended by '' | + | A. ''Security Metrics'' is a certified firm, specializing in the management of all aspects related to the PCI standards compliance, recommended by ''PaySafe''. This firm has the expertise required to assist you with the completion of the "SAQ A" or "SAQ C" form. For any questions about these forms, you can contact CJ Pilling at 1-801-995-6402.<br> |
<br> | <br> | ||
| Line 72: | Line 72: | ||
Q. Do we need an IT technician to complete the forms? | Q. Do we need an IT technician to complete the forms? | ||
| − | A. Certain questions are very technical and require an excellent | + | A. Certain questions are very technical and require an excellent understanding of your IT environment and networking; consequently it is very likely that you will need the help of your IT technician. |
<br> | <br> | ||
| Line 78: | Line 78: | ||
Q. We have failed the PCI certification. What should we do? | Q. We have failed the PCI certification. What should we do? | ||
| − | A. The security regulations that | + | A. The security regulations that failed are clearly identified in the compliance report. You must check these points with your technician to rectify the situation. |
<br> | <br> | ||
{{Footer_ProDon}} | {{Footer_ProDon}} | ||
Revision as of 09:59, 3 December 2015
Introduction
Here are a few frequently asked questions concerning the PCI requirements.
We invite you to read them, for further questions, please contact us at 1-855-564-4597 or file a support request.
Questions / Answers
Q. What are the PCI standards?
A. PCI stands for Payment Card Industry.Those are the security regulations related to the data manipulation of the transactions made with credit cards, in order to prevent fraud.
Q. Do we have to comply with the PCI standards if we have a merchant account with Netbanx (PaySafe)?
A. Yes, you do. Any merchant who accepts transactions (donations or payments) by credit cards must comply with the PCI standards.
Q. We only have the Online Donation Module (IMakeAnOnlineDonation), therefore we do not deal with any credit card number (Web account). Do we still have to comply with the PCI standards?
A. Yes, you do. You must still comply with the PCI standards, but the form is easier to complete. It is the "SAQ A" form.
Q. Is it normal to be asked to complete the "SAQ C" form?
A. Yes, it is. Since you accept phone or mail donations (reply coupon), you see and handle credit card numbers. The "SAQ C" form is a little more complete than the one mentioned in the previous question. The aim is to ensure PaySafe that your methods are secure when it comes to handling the credit card data to be entered in the virtual terminal.
Q. Is it normal to be asked to complete the "SAQ D" form?
A. Only if you keep credit card numbers electronically (e.g. by email or in an Excel spreadsheet). However, this method is to be avoided because it exposes you to great risks of fraud and implies major security constraints. It is the most complex form to complete.
Q. We have a PaySafe account as well as the Online Donation Module (IMakeAnOnlineDonation). Are the credit card data saved on your website?
A. No, they are not. The payment data are kept in a secure vault at Netbanx and cannot be recovered, neither by you, nor by IMakeAnOnlineDonation.
Q. We have a PaySafe account as well as the Electronic Transactions Module (virtual terminal). Are the credit card data saved in ProDon?
A. No, they are not. The payment data are kept in a secure vault at Netbanx and cannot be recovered, neither by you, nor by ProDon.
Q. Can Logilys assist me to fill out the "SAQ A" or "SAQ C" PCI form?
A. Only for the "LIST ALL THIRD PARTY SERVICE PROVIDERS (Leave blank if not applicable)" section. Here is the information you need to enter:
- Payment Gateway: "Netbanx-PaySafe"
- Point-of-Sale Terminal: N/A
- Web Host: You must enter the name of your organization's website host
- Payment Application: N/A
- Shopping Cart: "IMakeAnOnlineDonation - Logilys"
- Co-Location: N/A
All the other questions on those questionnaires are related to the IT security implemented in your organization and on the workstations hosting ProDon. Since we do not know this environment and do not have any expertise with the PCI standards, we are not able to assist you any further.
However, feel free to contact us with any questions related to IMakeAnOnlineDonation or ProDon.
Q. Who is Security Metrics?
A. Security Metrics is a certified firm, specializing in the management of all aspects related to the PCI standards compliance, recommended by PaySafe. This firm has the expertise required to assist you with the completion of the "SAQ A" or "SAQ C" form. For any questions about these forms, you can contact CJ Pilling at 1-801-995-6402.
Q. Do we need an IT technician to complete the forms?
A. Certain questions are very technical and require an excellent understanding of your IT environment and networking; consequently it is very likely that you will need the help of your IT technician.
Q. We have failed the PCI certification. What should we do?
A. The security regulations that failed are clearly identified in the compliance report. You must check these points with your technician to rectify the situation.
Document name: ProDon:FAQ - PCI Standards
