Re: [IUG] E-Commerce and PCI Data Security

[Leo Papa <papal at cantonpl dot org>]

If the new version of E-Commerce you refer to below is simply an upgrade, i.e., you did not have to purchase a "new" produce, I presume our issue would also be resolved by such a change.

WE have to upgrade to 2009B to implement several products for our new RFID system, including the Item Status API, Express Lane, and Fines Payment (or E-Commerce) for Express Lane. So, hopefully, the E-Commerce change would apply to fines payment at our self checks as well.

There is a separate questionnaire for the Bricks-and-Mortar credit card processing side of things, and that system does not talk to Innovative (or any other system we maintain). We manually update patron records after processing payments.  So, hopefully, we will not have as much of a problem addressing security issues associated with that service.

Thanks and Happy Thanksgiving,

Leo

-----Original Message-----
From: innopac-bounces at innovativeusers dot org [mailto:innopac-bounces at innovativeusers dot org] On Behalf Of Fifarek, Aimee
Sent: Wednesday, November 25, 2009 2:31 PM
To: IUG INNOPAC List
Subject: Re: [IUG] E-Commerce and PCI Data Security

Hi Leo - 
we are going to be handling it by switching to the new version of
eCommerce that will be available with 2009B.  It works with PayPal's
PayFlow link.  This will relocate the processing from the Innovative
server to PayPal, therefore eliminating the need for the Library to be
PCI compliant.  We've been unable to deploy eCommerce because of PCI
issues, and our PCI guru believes that this new version is a good
solution.

Not sure if this helps for your brick and mortar issues however.
 -- Aimee

Aimee Fifarek
Scottsdale Public Library
480-312-7060
-----Original Message-----
From: innopac-bounces at innovativeusers dot org
[mailto:innopac-bounces at innovativeusers dot org] On Behalf Of Leo Papa
Sent: Wednesday, November 25, 2009 12:04 PM
To: 'IUG INNOPAC List'
Subject: [IUG] E-Commerce and PCI Data Security

Good afternoon.

For those using E-Commerce (particularly if you are a turn-key site):

Have you received a questionnaire associated with the?
Our E-merchant is requiring completion of a  questionnaire associated
with the Payment Card Industry Data Security Standard.
We need to complete one for our online & brick-and-mortar credit card
processing associated with E-Commerce.

We cannot complete most of the information in the questionnaire because
it relates to configuration of our turnkey Innovative Server, and the
E-commerce application that was configured on our behalf.

I'm wondering if anyone else has found themselves in this situation and
how they handled it.

Thanks,

Leo Papa
IT Department Head
Canton Public Library
1200 S. Canton Center Rd.
Canton, MI 48188
734-394-1207 off
313-460-1781 cell


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---
--
This message was distributed through the Innovative Users Group INNOPAC
list
Public replies:  INNOPAC at innovativeusers dot org
Update your subscription options:
http://innovativeusers.org/iug-discussion-list

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
This message was distributed through the Innovative Users Group INNOPAC list
Public replies:  INNOPAC at innovativeusers dot org
Update your subscription options: http://innovativeusers.org/iug-discussion-list

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.