Glendale reviews PCI compliance audit to enhance cardholder data security

The Glendale Audit Committee held a special meeting on May 27, 2025, focusing on the city's compliance with Payment Card Industry Data Security Standards (PCI DSS). The meeting aimed to review the city's adherence to these standards, which are crucial for protecting cardholder data and maintaining public trust.

During the session, it was highlighted that the city of Glendale accepts payment cards for various fees, necessitating compliance with PCI DSS. This compliance is essential not only to safeguard customer information but also to avoid potential fines and the risk of losing the ability to process card payments. The city has recently been classified as a level 3 merchant, which involves processing between 20,000 and 1,000,000 transactions annually.

To ensure compliance, Glendale employs a Qualified Security Assessor (QSA) to conduct annual assessments and prepare a formal report. The PCI DSS outlines six goals and twelve requirements, including maintaining a secure network and implementing strong access control measures. The audit revealed that while most sites were compliant, three locations had exceptions related to tamper seal reviews and employee training.

The committee also discussed the importance of ongoing audits to identify deficiencies and prepare for the annual QSA assessment. The internal audit team emphasized the need for continuous training and awareness among city staff regarding PCI DSS requirements.

In addition to the PCI compliance audit, the committee noted that an audit of the city's take-home vehicle policy is underway, with findings expected to be presented at the next meeting in July. The meeting concluded with a commitment to maintaining high standards of security and compliance across all city departments.