There are more than 35 merchants that receive and process payments for a large university. Although there are protocols in place to protect sensitive, protected, or confidential data a plan should be in place to report a breach that allows for a quick response from the IT Security Office and Bursar's Office to minimize the exposure of the data. Collaboration between departments is paramount for the best results in case of a breach. To ensure everyone is familiar with the procedure for a Payment Card Industry Security Incident a tabletop exercise is used to learn where the procedure is strong and where it could be improved.
