Testing

Security Testing. The operator shall provide a layered approach to security within the cashless environment to ensure security storage and processing of date. In addition, the operator shall ensure: (a) All entry and exit points to open public network systems shall be identified, managed, monitored and controlled. (b) The operator shall monitor all its cashless systems in order to prevent, detect, mitigate and respond to cyberattacks. (c) Appropriate measures shall be in place to detect, prevent, mitigate and respond to common active and passive technical attacks. (d) Technical security tests on the cashless environment, including vulnerability assessments and penetration testing, shall be performed annually to guarantee that no vulnerabilities putting at risk the security and operation of the cashless system exist.