Self Assessment
Instructions:
- Please review this Instruction Page BEFORE proceeding with the Self-Assessment Questionnaire.
- This Self-Assessment must be completed annually and returned to the Treasurers Office (1220 Beardshear Hall). You must submit an updated Self-Assessment if your processing methods change during the year.
- Provide complete details in each space where they are requested.
- Please contact the Treasurers Office (4-1002) with any questions.
Who should complete the Self-Assessment Questionnaire?
- ALL Iowa State University (ISU) merchants are REQUIRED to complete a PCI Self-Assessment Questionnaire; and be in compliance with the PCI. You are considered an ISU merchant if you have an open credit card processing account and accept credit cards for payments.
- PCI compliance is required of all merchants and service providers that store, process, or transmit cardholder data. The program applies to all payment channels, including retail (brick-and-mortar), mail/telephone order, and e-commerce.
- The Owner of the merchant account is responsible for completing this Self-Assessment form. There are some technical aspects to this process, thus we understand the need to consult with other parties for assistance with obtaining information. However, ultimately the Owner of the merchant account is responsible for understanding all included processes. Typically, the merchant owner is a Business Manager, Director, or Department Head.
- If you have oversight for more than one merchant id, and the business and technical processes are identical, then one Self-Assessment form can be completed for both. If you have oversight for more than one merchant id, but the processes are different (ex. one e-commerce, one Point-of-Sale), then you must complete separate Self-Assessment forms.

