Overview

Almost all schools and departments accept credit cards as a form of payment for goods, services, information, and gifts.  Credit card acceptance at the University is growing.  Columbia colleagues who accept credit cards are known as merchants. 

The University strives to create an environment that enables uncomplicated acceptance of credit cards by merchants while ensuring safe and secure transaction processing.  It is important that all merchants comply with internal University policies and procedures and external regulations.

View the Credit Card Merchant & E-Commerce meeting PowerPoint presentation.  Get Trained

Compliance

Fill out MID Inventory Form

As part of our ongoing compliance and process improvements, the Office of the Treasurer requires that all merchant account holders complete this MID Inventory & Assessment Form.  All MID Inventory forms must be completed and emailed to the Office of the Treasurer creditcards@columbia.edu no later than December 31, 2009.

Required Training Certification

Beginning November 4th, all employees who are working with credit cards (including any IT employees who are working with credit card processing) will need to review an online training and take a certification quiz. For current merchant account holders, this training should be completed ASAP.

Link to Training (New!)

 

Forms and Resources

MID Inventory & Assessment Form

Merchant Account User Set-up Form

Credit Card Merchant Account Acknowledgment Form

IT Technical Security Review and Approval Form

PCI Rider (sample)

Credit Card Acceptance

Read our CU Credit Card Merchant Account Manual to learn about:

- Requesting a new merchant account

- Credit card processing methods

- Departmental procedures

- Roles and responsibilities

- Charge backs

- Security procedures

- Credit card scenarios

- Responding to a security breach

- And more ...

Policy

Review the Credit Card Merchant ID Setup and Maintenance Policy

Highlights of the Policy:

• The Office of the Treasurer is responsible for issuing credit card merchant accounts. 
• Any credit card information obtained physically must be secured and treated as confidential.
• Credit card information cannot be captured, stored or transmitted on University servers or networks.
• E-commerce systems and technologies must be outsourced to a PCI-DSS compliant vendor.  For more information on e-commerce and PCI-DSS compliance at Columbia, please refer to CUIT e-commerce policy.
• Technical security reviews are mandatory for each department requesting an e-commerce merchant account.
• University Departments accepting credit cards must complete an annual certification of compliance.

 

Questions

Please contact the Office of the Treasurer Cash Management Operations at creditcards@columbia.edu.