Merchant Services (MS) collaborates with Stanford schools and departments to help them establish and manage merchant accounts to securely process credit/debit card and digital payments for their products and services. For all things merchant-related, start with the Merchant Services Program overview page.
Community of Practice
The purpose of a Merchant Services office hours and community of practice (CoP) meetings is to provide a way for participants to share tips and best practices, ask questions of their colleagues, and provide support for each other. These provide a pathway for beginners to embark on a journey of mastery and for seasoned staff to share their experiences. These meetings are for Stanford merchants and staff with a shared interest in Merchant Services topics for virtual networking, learning, and mutual support.
Date and Link | Description |
---|---|
Thursday, April 18, 2024 |
CardinalPay office hours: Topics include log-in workflow, merchant settings, payment type set up and PTA assignments, and issuing refunds. |
Tuesday, April 23, 2024 |
CardinalPay office hours: Topics include Stripe transaction reporting and reconciliation. |
Date and Link | Description |
---|---|
September 21, 2023 |
Walk through of CardinalPay's new Stripe accounting automation tool for Oracle. |
October 19, 2023 |
Live demonstration of CardinalPay's front-end and back-end capabilities, set up, and system integrations. |
Date and Link | Description |
---|---|
January 27, 2022 |
No Meeting |
February 24, 2022
|
Community of Practice February Meeting Topic: The Information Security Office (ISO) orchestrates efforts and provides services to protect the information assets that are important to Stanford. ISO consults Merchant Services and has a vital role in supporting the university's payment card industry (PCI) regulatory compliance obligations. This was an opportunity to preview the new PCI Compliance website managed by ISO and share how it guides merchants through the requirements and training. |
March 24, 2022 |
Community of Practice March Meeting Topic: Third-Party Ecommerce Vendor Usage
|
May 26, 2022 |
Community of Practice May Meeting
|
July 28, 2022 |
Community of Practice July Meeting
|
August 25, 2022 |
Community of Practice August Meeting Our consulting firm, CampusGuard, covered the new Self-Assessment Questionnaire portal pciportal.stanford.edu
Other:
|
September 21, 2022
September 29, 2022 |
Community of Practice September Workshop #1 Topic: CampusGuard demonstration on PCI & SAQ Reviewed PCI Compliance Training and Self-Assessment Questionnaire requirements. The first workshop focused on the eCommerce payment channel where SAQ A was covered. Timelines for SAQ completion and submission: November 8 for all merchants
Community of Practice September Workshop #2 Topic: CampusGuard demonstration on PCI & SAQ Reviewed PCI Compliance Training and Self-Assessment Questionnaire requirements. The second workshop focused on in-person/mail order/phone order payment channels where SAQ P2PE (primary), B, and C-VT was covered. Timelines for SAQ completion and submission: November 8 for all merchants.
|
October 27, 2022 |
Community of Practice October Meeting Topic:
|
November/December | No Meeting |
Date and Link | Description | |
---|---|---|
December 2021 | No Meeting | |
November 2021 |
Community of Practice November meetingDiscussion topics: Cybersource migration update, SREDKey deployment overview, and best practices on virtual/non-POS payment processing. A cost benefit analysis of SREDKeys will be made available after we know more about how the merchant framework will impact the MS fee. |
|
October 2021 |
Community of Practice October 28 Workshop 2Discussion topics: Review PCI Compliance Training and Self-Assessment Questionnaire requirements. The second workshop focused on in-person/mail order/phone order payment channels where SAQ P2PE A (primary), B, B-IP, C-VT, C are covered. |
|
October 2021 |
Community of Practice October 21 Workshop 1Discussion topics: Reviewed PCI Compliance Training and Self-Assessment Questionnaire requirements. The first workshop focused on the eCommerce payment channel where SAQ A (primary) and A-EP are covered. |
|
September 2021 |
Community of Practice September meetingDiscussion topics: Beginning November 3, we will move to a direct relationship with Cybersource for Payment Gateway services. This replaces the current Cybersource “bundled” relationship through Wells Fargo. As we’ll be using the same products, many changes will be behind the scenes and invisible. There will be no immediate changes to payment processing or technical integrations. Merchants may see some changes to their Cybersource dashboards, and after migration we’ll be exploring additional service options for eCommerce payments. |
|
August 2021 |
Community of Practice August meetingIn partnership with the Information Security Office (ISO), Merchant Services now has guidance on PCI compliance requirements from the consulting firm, CampusGuard which is a full-service cybersecurity and compliance services company specifically devoted to serving campus-based organizations. With specific focus on Stanford University's PCI compliance program, CampusGuard assists with the oversight of merchant compliance, annual completion of Self-Assessment Questionnaires (SAQs), and tracking of merchant documentation. Certified QSA personnel, Cari King and Katie Johnson, can assist with questions regarding technical requirements, and in the review of new merchant processes, new payment technologies, applications, etc. CampusGuard can also assist with ongoing third-party and vendor management. |
|
July 2021 |
Community of Practice July meetingDiscussion topics:
|
|
June 2021 |
CANCELLED Community of Practice June meeting
|
|
May 2021 |
Community of Practice May meetingDiscussion on how Stripe as a payment processor plays an emerging role that impacts card acceptance on campus. Special insights from Rich with Associated Students of Stanford University (ASSU) and Brandy with the Alumni and Development Applications Platform Transition (ADAPT) on how Stripe has worked for them. |
|
April 2021 |
Community of Practice April meetingRoundtable/Q&A with the Information Security Office PCI Compliance team, featuring:
Discussion topics:
|
|
March 24, 2021 |
Community of Practice Kick-Off March meetingDiscussion topics:
|
Join the #merchant-community-forum Slack channel as a place for discussion and updates in between meetings and another tool for collaboration.
To learn more about creating and growing effective collaborative communities across Stanford, visit Communities of Practice.