PCI Incident Reporting

PCI Compliance

Suspected PCI Security Incident?

Immediately Notify the PCI Compliance Officer

Phone: (435) 797-3334
Email: pci@usu.edu

Reportable Events

  • Payment Device Tampering
  • Cardholder Data Exposure
  • Lost or Stolen Payment Devices
  • Suspicious or Fraudulent Activity
  • Malware or Unauthorized Software
  • Unauthorized System or Account Access

Immediate Actions in the Event of an Incident

  1. Immediately report the incident to PCI@usu.edu and your supervisor.
  2. Preserve all evidence related to the suspected incident.
  3. Do not alter, delete, or power off affected systems unless directed by the Incident Response Team.
  4. Isolate affected systems from the network if necessary to contain potential exposure.
  5. Document all observed indicators, including dates, times, systems affected, and actions taken.
  6. Maintain confidentiality and share information only with authorized personnel.
  7. Follow instructions provided by the University's Incident Response Team and cooperate with investigation activities.']  

Do Not

  • Reboot affected systems or payment devices.
  • Change passwords unless directed.
  • Delete logs or transaction records.
  • Conduct independent forensic investigations.