My company (health care) went through a PCI audit and needs to solve some major issues. Our branches collect CHD on paper and saves them to a network drive as a pdf that our corp office accesses to enter into Paymentech and charge them ongoing everchanging weekly charges. Obviously, that was flagged, mainly for unencrypted transmission via scan to mail email to the desktop where the pdf was then saved on the drive. The two options discussed were either continue with paper and to encrypt directly from the branch's copy scanner and save to a secure server directly or to use a mobile ipad app that encrypts the CHD that is properly keyed (not swiped) into the app and send it to our secure servers. I haven't found any copy scanner with encryption option nor have I found an app that sends encrypted data and removes it from the ipad immediately.
Any ideas on on how to secure this CHD via option 1 or 2 or your own? Thanks
***To CntrlDot - You are right, another big problem is the need to retain the CHD that is collected in the field before the charges are created. Plus the credit card is sometimes not present and CHD is given over the phone to the sales rep. So the swipe option won't cover what we do. I just found out we are locked into Xerox scanners, which I cannot find any immediate encryption option. Still looking at using the ipad option which removes the paper from floating around, but can't find an app the encrypts, sends and then removes. Thanks for any answers.