Revenue Processing. If the Agency will be processing revenue by any means, they will need to ensure that they are complying with IU revenue processing policies and procedures and with the then-current State and Federal regulations regarding data security, which includes compliance with Payment Card Industry Data Security Standards (PCI DSS) and any applicable laws. In addition, if electronic payments (including credit and/or debit card transactions) will be processed on IU premises or through the use of IU accounts or technology resources, the Agency must first be approved to do so by the Office of the Treasurer-Treasury Operations to ensure compliance with PCI DSS. Further, the Agency is required at the time of the Agency Agreement to make one of the following certifications [check one]: Revenue Will be Processed: Revenue, including any credit or debit card transactions, is being processed using IU accounts or technology resources including IU information technology and communication systems. Such revenue processing is in compliance with IU revenue processing policies and procedures. Approval to process credit and/or debit card transactions has been received from the Office of the Treasurer – Treasury Operations and all such credit card transactions are PCI DSS compliant. Revenue Will Not Be Processed: No revenue, including credit or debit card transactions, will be processed using IU accounts or technology resources, including IU information technology and communication systems. Please note that receipt of funds from the Agency into the IU general ledger account via bank wire, ACH, or check does not constitute processing revenue. INFORMATION TECHNOLOGY: IU may establish or provide data networking, access to the Internet, or computer accounts including email for Agency personnel upon request by the External Agency Representative and with approval by the Fiscal Officer and the Office of the Vice President for Information Technology. Such access and/or accounts will require payment of fees as specified in the rates for Information Technology, found at ▇▇▇▇://▇▇▇.▇▇▇▇.▇▇.▇▇▇/page/apjw. Additional networking or technology support needs that are not addressed within the above rate sheet will be charged to and payable by the Agency at a rate established on an individual basis by the Office of the Vice President for Information Technology. The Agency shall name an information technology professional (“IT Professional”) to serve as the functional unit technician, per policy IT-12. The IT Professional will be responsible for ensuring that all use of information technology by the Agency follows IU information technology security and other applicable policies. These policies are located at ▇▇▇▇://▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇.▇▇▇/policies/. The IT Professional will also be responsible for promptly alerting IU to any departure of Agency personnel from the Agency so that computing accounts for such individuals may be terminated. The IT Professional will also be responsible for insuring that standard IT security measures as required by IT policy are carried out, including but not limited to active patch management controls, performance of server vulnerability scans, compliance with the rule of least privilege, conducting critical data scans, and log monitoring to detect suspicious activity. Information technology access and/or accounts are terminable at will and in no event shall the access and/or accounts be extended beyond the time period of this contract. Any IU technology resources (e.g. internet access, cabling, etc.) used in connection with the processing of payment cards (debit and credit cards) must also be approved by the Office of the Treasurer-Treasury Operations, in conjunction with the Office of Information & Infrastructure Assurance, prior to activation to ensure compliance with the then-current Payment Card Industry Data Security Standards (PCI DSS) and any applicable laws. SPACE: Any space belonging to IU that is occupied and used by agency shall be the subject of a separate rental or occupancy agreement as prescribed by the appropriate campus office of space management. Such agreements, or waiver of this requirement, must be entered into with the appropriate campus office of space or facilities management prior to execution of this agency agreement and must accompany this agency agreement. Agency will provide access to any such space that it occupies to IU representatives, after reasonable notice is provided to Agency by IU, for purposes that include but are not limited to conducting fire-safety inspections. ADMINISTRATIVE FEE: On a monthly basis, in addition to the direct cost reimbursement, the Agency shall pay IU an administrative fee based on the total expenditures charged to the account. The rate at which the fee shall be assessed will be the same fee rate as the one computed by the University Budget Office for all external agency agreements. This fee rate is subject to annual adjustments.
Appears in 2 contracts
Sources: External Agency Agreement, External Agency Agreement