vention is the BestDefense


restrict access to cardholder data on a business need-to-know basis; limit physical access to cardholder data; and assign a unique ID to each person with computer access. • Regularly track and monitor all


access to network resources and card- holder data, and test security systems and processes. • Maintain an Information Secu-


rity Policy.


PCI and Payment Technologies One of the parking industry’s PCI


challenges is the popularity of the unattended payment terminal (UPT). Russo notes that the UPT presents a different set of challenges, when com- pared with an attended terminal. That the payment terminal is unattended is, in fact, an inherent security issue, he says. Second, a UPT has more moving


parts than an attended terminal. UPTs generally have keypads, screens, and a printer for receipts or exit cards, and these components are all contained in a cabinet that must be secure. In addi- tion, each one of those devices has to follow a standard to be secure. The PCI councilmanages two addi-


tional standards that guide merchants in selecting technologies that have been evaluated for PCI compliance. It assesses off-the-shelf applica-


tions via the PA-DSS (PaymentAppli- cation Data Security Standard) and payment terminals that process PINs (Personal Identification Numbers) through the PTS (PIN Transaction Standard). Developers have the option of bringing applications to the PCI council or one of its assessment com- panies to have the technology validat- ed. Once certified, the applications are listed on the PCI council website. “Choosing an application that is


already PCI compliant does not make you totally PCI compliant. However, it makes it easier to become compliant if you are using a certified application,” Russo explains. He adds that it is not mandatory for developers to get appli- cations assessed or for merchants to purchase equipment listed on the site. Still, in-house payment applica- tions developed by merchants or serv-


PROVEN


LEADERS IN LED AND


INDUCTION TEC NH OLOGIES


ice providers must be secured in accor- dance with the PCI DSS.


‘More About Security Than Compliance’ Russo stresses that any parking


facility anywhere in the world that


processes credit card transactions must be PCI DSS compliant. “First of all, if you are not compli-


ant, look at what you need to do to become compliant right away, because this is basically the law – you need to be Continued on Page 42


Upgrade your lighting equipment and start saving money today!


Installed projects with No Capital Expense that provide Positive Cash Flow from day one...


WE MANUFACTURE:  LED Lighting  Induction Lighting  Wireless Controls  Retrofit Kits


WE OFFER: Too good to be true?


Hear what our customers have to say, watch their video at www.ecoparkinglights.com


 Warranty: 5 Years Parts and Labor on Select Models


 Lighting and Payback Analysis  EPACT Tax Deduction Validation


 Guaranteed Savings Programs and Leasing


Contact us at (866) 897-1234 or info@ecoparkinglights.com


See us at the IPI booth #369 MAY 2010 • PARKING TODAY • www.parkingtoday.com 41


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36  |  Page 37  |  Page 38  |  Page 39  |  Page 40  |  Page 41  |  Page 42  |  Page 43  |  Page 44  |  Page 45  |  Page 46  |  Page 47  |  Page 48  |  Page 49  |  Page 50  |  Page 51  |  Page 52  |  Page 53  |  Page 54  |  Page 55  |  Page 56  |  Page 57  |  Page 58  |  Page 59  |  Page 60  |  Page 61  |  Page 62  |  Page 63  |  Page 64  |  Page 65  |  Page 66  |  Page 67  |  Page 68  |  Page 69  |  Page 70  |  Page 71  |  Page 72  |  Page 73  |  Page 74  |  Page 75  |  Page 76