PCI DSS Guidelines and Information

Each department which handles card data will have different processes and requirements. It is therefore not possible to provide a single guide on how to apply PCI DSS which fits all departments across the University.

To help departments comply with the requirements of PCI DSS we have produced guidelines covering a range of activities which are relevant to many departments where card data is handled. These documents can be used to help develop processes and procedures tailored to each department and their needs.

PCI DSS Requirements for Telephone Transactions (PDF - 155KB)

PCI DSS Requirements for Manual Forms (PDF - 160KB)

PCI DSS Requirements for Storage (PDF - 84KB)

PCI DSS Requirements for Removing Cardholder Data (PDF -183KB)

PCI DSS Requirements for Terminal Security (PDF - 243KB)

If you require further information, or would like advice on any activities which are not covered here, please email pcidss@contacts.bham.ac.uk.

Colleges

Professional Services