P2PE Instruction Manual for PCI P2PE v3.0
Version 1.6.2 – 3rd September 2020
© 2020 Cayan LLC
Page 35
5.
POI Device Transit
5.1 Instructions for securing POI devices intended for, and during, transit
Anytime you transport devices between locations, you must:
•
Pack the devices in tamper-evident packaging before transit. For example, using tamper-
evident bags, tamper seals, or security tape.
•
Ship devices using a trusted, trackable courier or shipping company.
•
Notify the company or site that you are shipping the devices to, including package tracking
details and tamper-seal serial numbers.
Physically secure POI devices in your possession, including devices:
Awaiting deployment
Undergoing repair or otherwise not in use
Waiting transport between sites/locations
5.2 Instructions for ensuring POI devices are shipped to trusted sites/locations only
Transport devices to and from trusted locations only. To help manage this process, you must:
•
Maintain a list of trusted sites that you may accept devices from and send them to.
•
Use only devices that you receive from trusted sites.
If you receive a device from an unknown or untrusted location:
•
Do not use the device until you verify that the source is trusted.
•
Contact us at
(1) (888) 249-3220
to verify that the device is authorized for use with your
P2PE solution.
5.2.1 Cayan’s trusted locations
We ship devices from one of two secure facilities:
•
POS Portal, 1627 Main Ave, Sacramento, CA 95838
•
POS Portal, 1920 Watterson Trail # A, Louisville, KY 40299
