Meeting_Body
FINANCE, BUDGET AND AUDIT COMMITTEE
JUNE 14, 2023
Subject
SUBJECT: UPGRADE TAP VENDING MACHINES TO MAINTAIN EMV/PCI COMPLIANCE
Action
ACTION: APPROVE CONTRACT MODIFICATION
RECOMMENDATION
Title
AUTHORIZE the Chief Executive Officer to execute Modification No. 173 to Contract No. OP02461010 with Cubic Transportation Systems, Inc. ("Cubic"), so that the TAP Vending Machines can accept payment from credit and debit cards with chips to remain payment card industry (PCI) compliant. This includes upgrades of computer hardware, the Oracle Database, and a Cubic Payment Application (CPA) in the amount of $12,364,519, increasing the total contract value from $389,251,345 to $401,615,864.
Issue
ISSUE
TAP Vending Machines, or TVMs, are installed at rail stations and major bus stops. The TVMs provide on-site access to the customers to purchase fare products and access TAP card information. The operating systems and hardware are reaching the end of life and require an update to receive system patching and support services to maintain network security and remain PCI compliant. The upgrades will also make the hardware ready for open payment technology that uses debit and credit cards for payment.
This contract modification includes two major changes for credit and debit card cybersecurity and compliance. They are:
a) Implement payment card industry (PCI) software modifications to comply with banking requirements for accepting credit and debit card fare payment.
b) Implement software, computer hardware, and EMV (Europay, Mastercard, and Visa) chip reading capability to transfer the liability for fraudulent credit card usage from Metro back to the card issuers.
Background
BACKGROUND
The original Contract No. OP02461010 was awarded by the Board on February 28, 2002. The Universal Fare System was last upgraded in 2016. While the system continues to be maintained by the Cubic Support Services Maintenance Agreement, an upgrade of the software and ha...
Click here for full text