My company is trying to become fully PCI Compliant and we are switching our outdated systems to use Authorize.net CIM among other things. But, currently we're all over the place and until our new database management system gets updated, I don't have a place that I can temporarily store credit cards for payments to a bill.
Currently, when a customer calls up and wants to pay their bill, they fill out a payment form online (which among other things includes their credit card number) that gets securely emailed (lol oxymoron) to us for a temporary period of time (before it is submitted into our database system and then sent to authorize.net to be charged). Or even worse, sometimes it's actually written down on a piece of paper! Not cool... It's just the number though, no CVV2 or anything.
Is there ANY method that allows us to store just a credit card number and an identifier for it (locally or remotely) that is PCI compliant? I can't use CIM for this as these are just loose numbers with no accounts at the time of entry, way way too complicated and our new system will be using it. I need a quicker solution for now. Basically I'd like to be able to say "Store Credit card xxxxxxxxxxxx1234 HERE with ID 5" and then later come back and say "Get me the credit card with ID 5". Just so it's stored encrypted somewhere in a PCI compliant manner.