Practice Guide for Completing PCI Compliance

Ensuring the security of payment card data is paramount for healthcare practices. Completing Payment Card Industry Data Security Standard (PCI DSS) compliance can be daunting, but it's vital for protecting patient information and your practice’s reputation. Here is a step-by-step guide on how to achieve PCI compliance using the resources provided by USPay and SigmaMD.

Accessing the PCI Compliance Portal

The initial step towards PCI compliance involves accessing the right tools and resources. Your practice administrator will receive an invite from USPay to join the compliance portal at ComplyWithPCI.com. Ensure that this invite is followed promptly to begin the compliance process.

Completing the Compliance Form

Navigating through the compliance form can be complex. Here are detailed tips to assist you in accurately completing the form:

• Assessment Method: select "Guide Me".

• Relationship with Third-Party Service Providers: answer "No".

• Payment Related Services: answer "No".

• Payment Processing Methods: select "Virtual Terminal" and "Ecommerce".

• Virtual Terminal: select "Manual Entry ONLY".

• Shopping Cart: choose "Entire Internet Presence Outsourced".

• Credit Card Number Storage: select "No".

• Third Party Managed System Service Providers: answer "No".

• Other Third Party Service Providers that may impact cardholder data security: answer "No".
• Qualifications: answer "No".

• Hybrid Self-Assessment Questionnaire Eligibility: When asked whether you are eligible for a Hybrid Self-Assessment Questionnaire, select "Yes".

Achieving PCI compliance is a critical step for any healthcare practice handling payment card information. By methodically following the outlined steps and accurately completing the PCI DSS self-assessment questionnaire, your practice can ensure the security of cardholder data and comply with industry standards.

If you encounter any difficulties, please reach out for support.