To meet the PCI DSS requirement for annual compliance training, all departments designated as “merchant” departments must submit a list of employees and student workers who handle credit card data for enrollment. This includes anyone who interacts with customers, uses credit card terminals, or supports related back‑office processes and systems.
Departments must complete the required Atlas form and attach an Excel spreadsheet that includes each employee’s and student worker’s name and NETID. The Information Security Office (ISO) will use this information to assign the appropriate PCI training in the KnowBe4 platform.
If you have any questions about this process, please contact the OBF/Treasury Department.