User Guide
Unencrypted Card Reports
Finance Systems
v1.0
User Guide
Unencrypted Credit Card Number Reports
Table of Contents
1.
1.1.
1.2.
1.3.
OVERVIEW ...................................................................................................................................3
DOCUMENT PURPOSE
3
DOCUMENT HISTORY
3
REQUIREMENT REFERENCE
3
2.1.
2.2.
2.3.
BUSINESS REQUIREMENTS ......................................................................................................4
BACKGROUND
4
REQUIREMENTS
4
SECURITY
4
2.
3.
THE REPORTS .............................................................................................................................5
3.1. UNENCRYPTED CREDIT CARD REPORTS
5
3.2. HOW TO RUN THE REPORTS
5
3.2.1. Menu
5
3.2.2. Running the reports
5
4.
BUSINESS CONSIDERATIONS ...................................................................................................9
5.
GLOSSARY .................................................................................................................................10
6.
6.1.
6.2.
6.3.
6.4.
6.5.
DOCUMENT CONTROL .............................................................................................................11
DOCUMENT LOCATION
11
CHANGE HISTORY
11
REVIEWERS
11
BUSINESS SIGN-OFF
11
REFERENCE DOCUMENTS
11
File: Document1
Last Saved: 9 February 2016
Page: 2 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
1. Overview
1.1. Document Purpose
The purpose of this document is to specify the new business process that needs to be followed as a
result of a small enhancement or customisation in NS Financials version 9.1.
1.2. Document History
The document version will be set to 1.0 on implementation of the enhancement or customisation in
production.
The document version will increase by 0.1 if the User Guide is updated after implementation.
For details of the document change history please refer to the Change History section at the end of
this document.
1.3. Requirement Reference
IT Requirement ID
SD910246
Requirement Name
Unencrypted Credit Card Number Reports
Brief Description
Provide a set of reports showing the Credit Card Number
unencrypted. These reports replace queries developed in 8.8
used by the Credit Card Controller.
Priority
1 – High
File: Document1
Last Saved: 9 February 2016
Page: 3 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
2. Business Requirements
2.1. Background
In NSF 8.8 the credit card number data was stored in an unencrypted state. In version 9.1 Oracle
stores credit card numbers in an encrypted state. Functionality exists that allows the card number to
be displayed online either encrypted or unencrypted depending on the user’s security settings.
However, when producing queries on the credit card tables the data is always presented as encrypted.
In NSF 8.8 the Credit Card Controller had a number of queries used for managing cards however
these no longer fulfill their purpose as the card numbers are encrypted in the query results.
A customisation was therefore needed to provide reports to replace these queries which will decrypt
the card number before printing them on the reports.
2.2. Requirements
Req. ID
Description
Source
1
Provide reports to replace the following Queries:
FUP_CC_DISPUTED_TRANS
FUP_CC_STAGED_TRANS
CARD_LIMITS_AND_DEFAULTS
CARD_REVIEW
Maria Perkov
2
The reports will be output in the following formats:
FUP_CC_DISPUTED_TRANS – MS Excel
FUP_CC_STAGED_TRANS – MS Excel
CARD_LIMITS_AND_DEFAULTS – MS Excel
CARD_REVIEW – MS Excel
Maria Perkov
2.3. Security
Only staff who have the UNSW_PC_CONTROLLER role will be able to run these reports.
File: Document1
Last Saved: 9 February 2016
Page: 4 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
3. The Reports
3.1. Unencrypted Credit Card Reports
The following reports now display the card number
Report
Process Name
Output
Formats
Sorted by
Selection Criteria
Disputed Credit Card
Transactions
F91_CC_DCRPT
Excel
Cardholder
Name
All Cardholders #
Disputed Transactions
Excel
Cardholder
Name
All records in Staging
tables
Staged Credit Card
Transactions
F91CCSTGTRN
Cardholder Limits and
Defaults
F91_CC_LIMIT
Excel
Cardholder
Name
All Cardholders
All Cards
Credit Card Review
F91_CC_REVW
Excel
Cardholder
Name
All Cardholders
All Cards
3.2. How to Run the Reports
3.2.1. Menu
These reports can be run via the following menu path:
Purchasing > Credit Cards > Reports > Decrypted Credit Card Reports
3.2.2.Running the reports
You will need to create a new run control initially. Once created, the following page will appear.
Click Run.
File: Document1
Last Saved: 9 February 2016
Page: 5 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
There is no need to select the Server Name as NSF will select the next available server for you.
You will notice that all four reports are run from the same run control.
Select the report that you require by ticking the Select box for that report and then click OK.
When running reports you would normally go to the Process Monitor to find the report output.
However, in this case the reports are not sent to the Process Monitor. Instead they are sent to the
Report Manager of the user who has run the report. This has been done for security reasons.
You can access the report from the Report Manager or via My Reports on the Portal.
File: Document1
Last Saved: 9 February 2016
Page: 6 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
Accessing the report via Report Manager
Click on the Report link.
Click on the xls report and the report will display.
File: Document1
Last Saved: 9 February 2016
Page: 7 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
Accessing the report via ‘My Reports’ on the Portal
Go to your NSF Home page. My Reports will appear on your home page if it has been enabled on
your Content page. You may need to enable it.
Click Content.
Select My Reports and Save. The following will appear on your NSF home page.
File: Document1
Last Saved: 9 February 2016
Page: 8 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
4. Business Considerations
In order to comply with PCI DSS Accounts Payable staff need to ensure the following precautions are
taken once the reports are run:
1. Save the report to the Credit Card folder. This folder is secured via the FSAM system– a limited
number of people have access to this folder)
2. If the report is printed, do not leave the report unsecured eg, left on desks etc. Shred the report
immediately after use.
3. If emailing the report, secure it by a password. Send password in a separate email.
File: Document1
Last Saved: 9 February 2016
Page: 9 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
5. Glossary
Term
Description
NS Financials or
NSF
NewSouth Financials application. UNSW’s name for its Finance
system.
AP
Accounts Payable
Excel
Microsoft Excel
FSAM
File System Access Management. UNSW’s is a self-service interface
that allows users to manage and control access to folders within the
UNSW Enterprise File System
My Reports
Summary of reports user has run. Located on the NSF Portal.
PCI DSS
Payment Card Industry Data Security Standard
PCI DSS compliance is managed and monitored by the payment
brand (ie. VISA in the case of UNSW’s Credit Card)
VISA’s web site states: “PCI DSS compliance is required of all
entities that store, process, or transmit Visa cardholder data,
including financial institutions, merchants and service providers. The
PCI DSS applies to all payment channels... Visa Inc.'s compliance
programs manage compliance with the PCI DSS with the required
program validation.”
For more information please refer to:
http://usa.visa.com/merchants/risk_management/cisp_overview.html
Report Manager
Manages reports and processes that user has run. User can view
reports from the Report Manager.
UNSW
University of New South Wales organisation
File: Document1
Last Saved: 9 February 2016
Page: 10 of 11
UNSW Confidential
User Guide
Unencrypted Credit Card Number Reports
6. Document Control
6.1. Document Location
J:\BSI\FINSYS\Financial Systems\Systems\NS Financials\V9.1\Documentation\User
Guides\Unencrypted Card Reports User Guide .docx
6.2. Change History
Version Date
1.0
Description
Author
09 Dec 2011 Issued to Accounts Payable when reports migrated to
production.
Maria Perkov
6.3. Reviewers
Name
Title
Review Date
Heidi Woolf
Senior Business Analyst
09/12/2011
6.4. Business Sign-off
Name
Title
Signature
John Hilton
Manager, Shared Services
Date
6.5. Reference Documents
Document Name
Location
Version
End of Document
File: Document1
Last Saved: 9 February 2016
Page: 11 of 11
UNSW Confidential