Payment Card Industry Data Security Standard (PCI DSS) Employee Training

Employees who work in one or more departments at SBCC that accept credit cards, and who process credit card transactions as part of their job, are required to complete security training specific to credit card processing. Santa Barbara City College is required by law to ensure that all employees who process credit card transactions must complete merchant training on an annual basis.

Because of this requirement, the aforementioned employees must complete the following:

Read the PCI Information Security Policy.

After reading the PCI Information Security Policy, complete the Agreement to Comply with the PCI Information Security Policy.

Review the Tamper Prevention Training document.

After reviewing the Tamper Prevention Training document, complete the Tamper Prevention Training Acknowledgement.

Complete the SBCC IT Security Awareness Training through the California Community Colleges Vision Resource Center. This online training consists of 34 short modules totaling 2 hours and 41 minutes of instruction. Employees who are required to take this training will receive an email from infosec@sbcc.edu with the subject “SBCC IT Security Awareness Training". This training must be completed within 30 days of receiving the notification.

To access the SBCC IT Security Awareness Training:

  1. Sign into the campus portal.

  2. Select the “Employee” menu, then “Resources.”
    Employee Menu, then Resources

  3. Select “Vision Resource Center Professional Development Portal” in the middle of the page.

  4. At the Vision Resource Center site, click the “FIND” button in the middle of the page.
    Find button

  5. Type “SBCC IT Security Awareness Training” in the search box, and then select “SBCC IT Security Awareness Training” when it appears in the search results.
    Searching and then selecting SBCC IT Security Awareness Training

  6. Click “OPEN CURRICULUM” on the right side of the page to begin the training.
    Open Curriculum Button

This training must be completed within 30 days.

The above tasks must be completed within 30 days from the date you were notified of the requirement to comply. Employees will be asked to do this once per year, typically at the start of the Spring semester.

Please contact infosec@sbcc.edu with any questions or concerns. We sincerely appreciate your cooperation in assisting SBCC with protecting our ability to process credit cards by following best practices.