NOTE: This report may only be used when CARS+ has been configured to implement PCI/PA-DSS data security standards. Please refer to the chapter Overview - PCI-PA Implementation Guide for details on implementing this feature.

From time to time, it may be necessary to research which users have had access to a credit card number.

When your CARS+ system is set up for PCI/PA-DSS compliance the following occurs:

When those records have unmasked credit card data in them, the fact that the record was accessed and, therefore, the credit card number was viewed, is logged in the FOP (Form of Payment) Viewing Log File. This file records any viewing of unmasked credit cards from the following:

• Searches of the Deposit/Payment File
• Display of a previously saved RA, Reservation, Petty Cash Entry, or Customer Record.

By PCI standards, this log should remain on the system for a minimum of 365 days, after which it can be purged using the Purge FOP Viewing Log program on the Purge Menu.

Use this program to:

• Obtain a report of entries in the FOP View log file.

To access this program: type FOPLOG (RET) at any menu "OPTION:" field or the appropriate number on the Transaction Logging Menu under the System Management Menu. The screen will then display:

OPTION: __ FOP VIEWING LOG REPORT 1 CC# ALL 2 Start Date 10-10-08 3 End Date 10-10-08 4 Employee ALL 5 Print/Display P Printer: /dev/tty 1BEGIN 2 3ERASE 4 5BACKUP 6 7HELP 8

Enter data as follows:

1. CC#	To select records for a single credit card number, enter up to 20 numeric characters representing the credit card number. Or, press (RET) to include all credit card numbers. EXAMPLE: Type: 4005555000111 ( RET) Upon pressing (RET), the number will be displayed in the masked format. EXAMPLE: 4005*0111 If the number entered does not meet a definition of a credit card in the Credit Card Definitions file, the field is cleared after pressing (RET).
2. START DATE	Using your selected date format, enter the starting date of the period to be examined. Press RET to default to the current date. EXAMPLE: Type 090108 (RET)
3. END DATE	Using your selected date format, enter the ending date of the period to be examined. Press RET to default to the current date. EXAMPLE: Press (RET)
4. EMPLOYEE	To limit the report to those records for a single employee, enter the employee’s user code. Otherwise, to include all employees, press (RET). EXAMPLE: Press (RET)
5. PRINT/ DISPLAY	Enter: P = Print a hard copy of this report on your terminal's assigned printer or send the report as an e-mail message. See the Edit Terminal Records chapter for instructions on how to assign printers and send reports as e-mails. D = Display this report on your terminal screen. See the General Data Entry Instructions chapter on how to control the screen display. EXAMPLE: Type P (RET)

PRESS "F1" AT "OPTION:" TO BEGIN .

Notes about this report:

The following columns of data are shown:

• Credit Card # (in masked format)
• Employee User code
• Date
• Time
• Terminal (Terminal Record in use)
• Location (from the Terminal Record)
• Transaction ( RA #, Reservation #, or confirmation #. ) If the credit card is viewed while opening a RA and it is a walk up RA, this field will be blank. If the RA is being opened from a reservation and it has a confirmation number, the confirmation number is shown in this field. If no confirmation number, the reservation number is shown in this field.
• Program (Name of program used to view the card number)
• Reason (for operations doing EDC: reason code 01=there was a communication error from processor; 02=the agent was instructed to phone for auth#)

Records are sorted by the employee code and date.

A field in the Location record is provided for entering the number of times per day it is expected that employees at the location will need to see unmasked credit cards. When an employee has looked at cards more often than the expected times, an asterisk ( * ) is shown on the date subtotal row for that date.

An example of a displayed report is shown below:

Page 0001 F O P V I E W I N G L O G R E P O R T -------------------------------------------------------------------------------- FOP# Empl Date Time Terminal Loc Transaction Program R -------------------------------------------------------------------------------- 4660*0026 ABC1 02-07-11 1126 ABC1 TUS 00000046 CROBJ/RAOPEN DATE SUBTOTAL 1 3782*2122 ABC1 02-08-11 1121 ABC1 TUS A0001214 CROBJ/EDTOPN 3782*2122 ABC1 02-08-11 1122 ABC1 TUS A0001214 CROBJ/EDTOPN DATE SUBTOTAL 2 4714*4342 ABC1 02-09-11 1215 ABC1 TUS **003330 CROBJ/RESUPD 4714*4342 ABC1 02-09-11 1216 ABC1 TUS **003330 CROBJ/RESUPD 4560*0017 ABC1 02-09-11 1227 ABC1 TUS **003331 CROBJ/RACLOS DATE SUBTOTAL 3* 4317*8143 ABC1 02-10-09 1506 ABC1 TUS CROBJ/RAOPEN 3782*2122 ABC1 02-10-09 1506 ABC1 TUS A0001279 CROBJ/RAOPEN 4005*0019 ABC1 02-10-09 1507 ABC1 TUS A0001280 CROBJ/RAOPEN 4013*0193 ABC1 02-10-09 1511 ABC1 TUS A0001017 CROBJ/EDTPST Q=quit, S=shift display, C=continuous display (586)PRESS RETURN