About this Document
This document describes the steps that must be followed in order for your Tuition Express installation to comply with the Payment Application - Data Security Standards (PA-DSS). The information in this document is based on PCI Security Standards Council Payment Application Data Security Standards program (version 1.2 dated October, 2008).

Procare instructs and advises its customers to deploy Procare’s Tuition Express in a manner that adheres to the PCI Data Security Standard (v-1.2). Subsequent to this, best practices and hardening methods, such as those referenced by the Center for Internet Security (CIS) and their various “Benchmarks”, should be followed in order to enhance system logging, reduce the chance of intrusion and increase the ability to detect intrusions, as well as other general recommendations to secure networking environments. Such methods include, but are not limited to, enabling operating system auditing subsystems, system logging of individual servers to a centralized logging server, the disabling of infrequently-used or frequently vulnerable networking protocols and the implementation of certificate-based protocols for access to servers by users and vendors.

If you do not follow the steps outlined here your Tuition Express installation will not be PA-DSS compliant.

Please note: based on the unique design of the Tuition Express service (software architecture and hosting services) several elements of the PA DSS Standard do not apply. In order for us to be fully compliant in the writing of this Implementation Guide each Standard will be referenced and discussed. Those Standards that do not apply will be so noted.

To Locate your Tuition Express Account number:
   1. From the main screen of Family Data & Accounting go to Functions > Family Accounting > Process Tuition Express.
   2. Your Tuition Express account number appears in the Title Bar (top left).