Best Practices

• Limit access to cardholder information to only employees who have a business need-to-know.
• Do not scan, recycle, or duplicateprinted cardholder data.
• Destroy documentation containing credit card information when it is no longer needed.
  • Cardholder data must be securely destroyed using a shredder or a locked disposal box.
• Process payments immediately upon receipt when possible.
• Never e-mail credit card information.
• Do not use wireless networks for the processing of Credit Cards.
• Protect computer networks with hardware firewall and intrusion detection / protection.
• The Identity Finder program should be used monthly to scan inboxes, sent folders, and desktops to identify rogue files.
• Limit Internet usage on computers that process credit cards.
• Lock computer terminals and paper storage areas when un-attended.