Service components: - establishing and maintaining the University’s strategy and framework for the security of cardholder data and sensitive authentication data, and compliance with the PCI DSS; - establishing, maintaining and monitoring compliance against applicable PCI DSS requirements and cardholder data handling rules across the University; - establishing, reviewing, maintaining and appropriately communicating all policies, processes and procedures relating to the security of cardholder data and compliance with the PCI DSS; and - providing suitable guidance and support to departments regarding the handling of cardholder data. - providing technical advice in relation to PCI DSS requirements; and - maintaining the University’s Information Security Policy as appropriate to reflect current PCI-DSS requirements.