A tour of the more than 170 Petro-Card 24 sites throughout Missouri, Arkansas, Iowa and Kansas was recently completed by Dean Inskip, senior compliance administrator, to upgrade the physical security of the payment systems. As part of the company’s efforts to strengthen its security stance related to new Payment Card Industry (PCI) regulations, Inskip replaced the generic locks on of the payment kiosks at each location.
The project, which began in June and concluded in October, was prompted by revisions made within the last year to PCI security standards for cardholder data environments, such as the Petro-Card 24 kiosks.
While Inskip says there have been no attempts to illegally access the data at any of the company’s Petro-Card 24 locations, the updated standards required MFA Oil to take action to protect and secure the valuable data sent through the kiosks.
“Before this project, one key fit the same lock at every facility,” Inskip says. “To meet the increased PCI standards, we needed to install specific locks for each location. So instead of a single, universal key providing access to all locations, each Petro-Card 24 now has its own unique key.”
In addition to installing unique locks, technology was set up to manage and track access to the kiosks.
Besides enhancing security at each site, Inskip installed upgraded, multi-tiered antennas capable of connecting to both cellular and GPS networks. He says the new antennas provide better connection to service providers and should improve each unit’s ability to send and receive communications.
Inskip travelled more than 7,000 miles over the course of the project. Although the task required long days and time away from home, Inskip is pleased to have it completed.
While Inskip was a true “road-warrior” throughout the project, he notes it was truly a team effort that required close coordination with local facilities personnel and support from teammates working in the information technology group.