P2PE Instruction Manual for PCI P2PE v3.0
Version 1.6.2 – 3
rd
September 2020
Page 30 © 2020 Cayan LLC
4.2 Guidance for selecting appropriate locations for deployed devices
You must install your device in a secure location to reduce the risk of criminals targeting the
device for skimming. We recommend that you consider the following when selecting installation
locations:
•
Control public access to the device, so that people have access only to the parts of the
device that they need to complete a transaction. For example, PIN pad and card reader.
•
Locate the device where authorized personnel can easily observe and monitor it, for
example during daily checks by store or security staff.
•
Locate the device in a secure environment that deters compromise attempts, including, but
not limited to:
‒
Visible security measures
‒
Video surveillance
‒
Adequate lighting
‒
Access paths
•
Physically secure the device so that criminals cannot easily remove it. For example, when
using Genius Countertop devices, install them on the stand that we provide or when using
Genius Handheld devices, store them in a lockable area when they are not in use.
•
Enforce operational security processes to make sure that members of staff or security
regularly inspect the device.
4.3 Guidance for physically securing deployed devices to prevent unauthorized removal or
substitution
4.3.1 Genius Countertop devices
You must physically secure a deployed device to prevent unauthorized removal or substitution.
For example, install the device securely on the stand that we provide.
This includes devices that you use for attended and unattended services, as applicable to the
P2PE solution. For example, kiosks, pay-at-the-pump, etc.
You must prevent unauthorized access to devices awaiting replacement while in your
possession.
Important:
If your device develops a fault, we arrange for you to return the device to us,
and we ship a replacement device to you. We do not repair deployed devices; therefore,
you should
NOT
grant access to any person that claims to be repair or support
personnel.
