4.2 Guidance for selecting appropriate locations for deployed
It's down to you to control public access to POI devices. Access must be limited to the parts of the POI device a customer
needs to use to complete a transaction (for example, PIN pad and card reader). You must keep a close eye on the device
at all times, including when a customer is using it.
Training should be provided to staff to make sure only authorised personnel use the device and know how to spot
suspicious behaviour. Training guidance can be found in Appendix A of the Data Security Policy.
4.2 Guidance for selecting appropriate locations for deployed devices
Make sure the location of the device enables anyone operating it to be able to observe and monitor the device at all times,
including when a customer is interacting with it.
When the device is not in use it should be stored securely in a locked room or drawer that only authorised staff can access.
Responsibility for the security of the device should only be given to authorised staff. If the device is stored away securely,
you should record a log of staff date/time in and staff date/time out for a clear audit trail.
If an unexpected third-party is requesting access to the device for maintenance, the request should be denied, even if the
third-party is from a Dojo authorised courier or present themselves as part of the Dojo team. You should get in touch with
Customer Support straight away to report this.
Training should be provided to staff to make sure they're able to check the device and identify any tampering, removal or
substitution. Training guidance can be found in Appendix A of the Data Security Policy.
D-0016-P-1.0. Dojo is a trading name of Paymentsense Limited. Copyright ©2020 Paymentsense Limited. All rights reserved. Paymentsense Limited is authorised and regulated by the
Financial Conduct Authority (FCA FRN 738728) and under the Electronic Money Regulations 2011 (FCA FRN 900925) for the issuing of electronic money and provision of payment
services.Our company number is 06730690 and our registered office address is The Brunel Building, 2 Canalside Walk, London W2 1DG.
devices