Overview
UC Berkeley has centrally-supported credit card payment solutions to enable units to receive payments for goods and services that are not student billing.
If your unit has already implemented a credit card payment solution for payments that are not student billing, all of the employees in your department that handle credit card payments must complete Credit Card Security Awareness training each year.
If your unit would like to implement a credit card payment solution for goods and services that are not student billing, UC Berkeley has centrally-supported credit card payment solutions for you to use. Our Campus Compliance team supports you in the setup process so that you can process credit card payments in a safe and secure manner. Note that while students may pay fees with credit cards, this information is not applicable to student billing. Please refer to the Accepting Credit Cards for Payment page for more information.
Before either accepting payment via credit card or signing any agreements involving credit card services or equipment, you must receive written approval from the Campus Credit Card Coordinator.
Campus Deliverables
Annual Training and Certification
Training
Once a credit card payment solution has been implemented, Credit Card Security Awareness training is required on an annual basis for all employees in departments that handle credit cards.
Certification
In addition, a document must be signed to acknowledge that training has been completed.
eCommerce
- Online
- Must avoid VOIP for security reasons (PCI)
- Self Assessment Questionnaire A (BECTR952)
Card Presence
- Physical card with a terminal
- Self Assessment Questionnaire B (BECTR953)
Notify the Controller’s Office About Changes in Your Organization
If there are changes or turnover in the organization, the department must notify the Controller’s Office of the employee name(s) and effective date(s).
Policies that Govern the Work
Roles and Responsibilities
Department PCI Coordinator
The Department PCI Coordinator is responsible for the annual PCI certification process, which includes a meeting and completing the questionnaires and supporting documentation by the deadline set by the Controller’s Office. Non-completions are escalated to the DFL or the coordinator’s direct supervisor.
Divisional Finance Leader (DFL)
The DFL is responsible for notifying the Merchant Support team by emailing merchantsupport@berkeley.edu about a change in the PCI Coordinator.
Systems Used
VIGI One or VIGI-Trust is a repository of all of the questionnaires to be completed by the department.