Merchant News: 4th Quarter FY21

Padlock with screen of numbers behind

 
PCI Compliance Recertification for all Harvard credit card merchants will be moved back to its original date of June 30, 2021.
 
Each merchant is required to complete annual PCI Compliance Training, provided on the Harvard Training Portal.  In addition, the PCI Compliance Working Group will once again provide a virtual walk-through of SAQ A, B, and P2PE.
 
Email correspondence detailing the process will be sent out by April 5th.

 

Credit card logos

Harvard Credit Card Merchant Handbook

We are excited to announce a new, streamlined version of the Merchant Handbook has been posted to the OTM Website.

Credit Card Merchants are required to adhere to the handbook as referenced in the Finance Policy for credit card acceptance.

Of particular note is the clearly defined methods of credit card acceptance:

1. Online - Example: Consumer visits harvard.edu website for purchase of educational program, museum attendance or campus service.
    a) Using an authorized service provider website - SAQ A merchant
    b) Using an authorized payment provider via website redirect - SAQ A merchant

2. On campus - Example: Consumer visits campus dining hall, museum/theatre OR Harvard employee types cardholder information from mailed or telephonic source.
    a) Using an authorized point-to-point encryption terminal - SAQ P2PE merchant
        i. Connected to a networked system/computer
        II. Networked stand-alone terminal
    b) Using an authorized analog dial-out terminal - SAQ B merchant

Note: Authorized vendors can be found on the Visa Registry for Approved Vendors and must be verified by the Cash Management Office prior to executing a contract.

By following these guidelines, credit card data is no longer passing over Harvard’s network and reducing associated security and payment risk involved.

Image of credit card swiping in terminal

 

P2PE Installation Reminder

Whether you are using Bluefin terminals to connect to CyberSource Virtual Terminal or using Clover devices over Harvard WiFi, merchants are responsible for following the installation and maintenance outlined in the vendor provided PIM (P2PE Installation Manual).   This requirement is defined within Requirement 9.9 of the P2PE Self-Assessment Questionnaire.

If you need assistance with locating your P2PE Vendor PIM, contact pci_compliance@harvard.edu

keyboard button labeled eCommerce

Save time with TouchNet uStores

A year ago, the way we do business changed forever. The unfolding pandemic meant that processing cash and paper checks became not only inefficient but dangerous to employees and our communities. Luckily, the University already had an established, secure, easy to implement, electronic payment solution in place. Since its initial rollout in 2018, the TouchNet uStores program has developed into 100+ uStores across the University, providing payment solutions for Harvard merchants big and small.

TouchNet uStores are customized online storefronts used to collect credit card payments and electronic checks for fees, services, deposits, events, memberships, registrations and more. With TouchNet uStores you can now:

Save time by skipping:

  • in-person trips to the office and/or bank to process paper checks
  • manual journaling of funds to the correct 33-digit revenue code
  • the need for hand-issued receipts and manual data entry of customer information

TouchNet uStores allow you to take advantage of:

  • Electronic payments around the clock with minimal effort
  • Reduced time and errors with automatic General Ledger integration
  • Ability to collect customer information and payment details in one place with easy reporting

Other important things to know about TouchNet uStores:

  • Can be set up in as little as 2 weeks with no prior experience expected or required
  • Training and ongoing customer support is provided in-house by Harvard eCommerce
  • It is a fully vetted and PCI compliant payment solution specifically tailored to meet the needs of higher education

Over a hundred Harvard uStores have been opened for schools/units/departments like yours. Here are just a few Harvard offices who have made the switch: HBS MBA Registrar’s Office, HUHS, Harvard International Office, Mortgage and Educational Loan Office, Harvard Library Privileges Office, HMS MA Degree and Certificate Programs.

If you would like to learn more, check out our Harvard TouchNet webpage or contact us at otm_ecommerce@harvard.com to find out how we can use uStores to save you time.

Not sure if TouchNet uStores is the right solution for you? Use the eCommerce Payment Decision Tool.