The UNL PCI Team schedules quarterly scans and any necessary follow up scan necessary to obtain a passing scan for submission to Elavon. Results will be referred to the department for remediation. Merchants will be required to respond with remediation plans within three business days and then develop timely implementation schedules.
A PASSing PCI scan must be submitted each quarter to maintain compliance with Elavon. For a scan to be PASSing, no merchants can have any FAILs so it is imperative issues are resolved promptly. Failure to remediate FAILing scans in a timely manner will result in the loss of merchant privileges.
System Configuration Change Request Form
Whenever any change occurs to a system that involves payment card activity, the change must be requested and approved via a System Configuration Change Request Form. This form must be utilized to ensure all security measures are in place for systems related to credit card processing. Anything outside of monthly software patches should be approvied via it. Examples include:
- Firewall changes
- Changes to or new IP's
- Change in version of software
- Change in service provider
This list is not inclusive of all situations where a form should be completed. If you are unsure, error on the conservative side, and submit a form.