Payment assurance
Understand how payments are handled.
You need to know how payment information moves, which services are involved and who is responsible at each step. Review the published PCI DSS attestation below, then work with ISH to confirm its scope and the payment arrangements relevant to your organisation.
Published attestation
See the evidence and what it covers.
Read the attestation alongside the payment service and flow it describes. Its scope should be checked against the arrangement your organisation proposes to use.
View the published PCI DSS attestationFollow a payment through.
Identify where a learner or payer enters information, which payment provider handles it, what onCourse records and how your team reconciles the result. Agree who manages exceptions and which responsibilities remain with your organisation.
Connect payment assurance with the wider review.
Payment handling is one part of the service review. Your team can also examine access controls, data flows, recovery arrangements and support responsibilities for the intended use.
View security informationReview the assurance index