Statewide Electronic Commerce Program North Carolina Office of the State Controller March 2016 Fayetteville Fort Bragg

SECP Program:

Electronic Funds Transfer: 15 State Agencies 11 Community Colleges 16 Universities 11 Local Education Authorities  53 Participants on BOA Contract  155 Total Accounts  Payroll, Vendor Payments, Collections

Benefits of Electronic Payments  Reduced Costs  Less Paper  Fewer printer cartridges  Less ink and toner  Reduced Fraud  Less Positive Pay  Minimizes Escheats Electronic Funds Transfer: ▪ Altered checks ▪ Organized crime ▪ Malicious insiders ▪ Hacked systems ▪ Spyware Common cases of fraud ▪ Digital disbursements ▪ ACH positive pay solutions ▪ Card solutions ▪ Check outsourcing Solutions being implemented

Prepaid Cards: Potential uses for Prepaid Cards: Research study payments Student & Employee per diems Student refunds Prepaid CardP-Card Debit-basedCharge card Deducted from funded accountMonthly charges invoiced Can be reloadableUsed for business purchases Eliminates paper checksLimited use

Merchant Cards: 30 State Agencies 24 Community Colleges 16 Universities 26 Local Governments  96 Participants on SunTrust Contract  Fiscal Year  18.4 Million transactions  $1.5 Billion in Sales

Merchant Cards: All Merchant Card forms completed through DocuSign OSC webpage contains PDF and description of each form Form title links directly to DocuSign

PCI Compliance:  New Standards coming out in March/April 2016  PCI DSS Version 3.2  Annual Self-Assessment Questionnaire completed in Navis Portal  Completed SAQ & Attestation of Compliance submitted to First Data & OSC  Setup External Vulnerability Scans in Navis Portal  Passing report due each quarter  Next Coalfire webinar  March 22 nd – Understanding Encryption Requirements  Register on OSC’s webpage  Keep OSC updated with any personnel changes related to your PCI compliance efforts  Primary Business or Technical contacts

PCI Compliance: Hot Topics!  EMV Technology  Upgrade Point of Sale terminals  TransArmor Solution  End-to-End Encryption  Tokenization  Reduces PCI Scope  Clover Go  Mobile payments via Smartphone  Approved PTS Device by PCI Council  Equipped with TransArmor  EMV Capability