PCI DSS

As required by MnSCU, we are working with a third party to review all business and electronic processes that involve the handling of credit card data at both BSU and NTC. Netspi, a company specializing in the IT portion of this type of review process, will perform a variety of testing outside normal BUS operational hours. This process should be complete by 3/30/09, but it will repeat at quarterly intervals indefinitely.

There are some known risks in regard to the testing. Some of these risks include:

• Scans may create performance or connectivity issues with our BSU website.
• Application or server access may be degraded during testing.
• Applications or servers may crash.
• General network slowdown may occur.
• We will monitor and work to resolve any potential issues that arise.