CITGO is under the same pressure to meet the revised PCI regulations as their marketers and retailers. While it is updating its internal [image-nocss] operations, CITGO also is looking for ways to assist its marketer and retailer network with face-to-face training and information to cut through the confusion, to simplify the compliance process and to help them to avoid costly mistakes.
"The complexities of the petroleum industry make PCI compliance especially confusing for jobbers and retailers," said Jonathan Watson, manager of business services and payment card at CITGO. "CITGO is committed to doing everything it can to help our network mitigate risk and protect consumers against data theft. While we support the payment card industry's desire to increase data security, we also understand what a huge burden these regulations place on businesses, including CITGO station owners and operators."
To help marketers and retailers understand what they need to doand avoid procedures that are unnecessaryCITGO has developed a comprehensive breakdown of the steps and processes required to meet PCI compliance regulations. The materials, which are available through CITGO MarketNet, allow marketers and retailers to more easily understand how they can mitigate their risk of a security breach and help them map out, and pay for, the changes they will need to make to their operating procedures and equipment to ensure compliance.
"We encourage our marketers and retailers to start now to get up to speed on the issues, know what they need to do to be compliant and ensure they have the financial support to make the required changes to their equipment," Watson said. "We also urge marketers and retailers who are purchasing new equipment to make sure it meets upcoming regulations and be wary of people selling outdated products. The materials developed by CITGO can help explain the requirements and prevent our jobbers and retailers falling for expensive scams."
The CITGO materials include "The Five Steps to Mitigate Risk of Compromise" and a comprehensive chart that identifies the PCI compliance status of key software productssuch as VeriFone Ruby, VeriFone Vx570, and Gilbarco G-Siteand provides guidance on key dates and support for those products.
"Every business that accepts credit cards is going to need to comply with new regulations," Watson added. "Retailers who wait may find that the resources they needhardware, software, etc.are sold out. One of the key messages we want to communicate is "act now." Don't wait to start the compliance process."
As part of its extensive education program, CITGO is also offering 10 training sessions in June, July and August, run by an independent third-party expert who has conducted training for at least one of the major card issuers. These sessions will walk marketers and retailers through the compliance steps and allow them to ask questions specific to their businesses.
"CITGO wants to make sure all of our marketers and retailers have PCI compliance front of mind and that none of them get left out when the compliance dates hit, as there will be no forgiveness from the credit card companies," said Michael Pooler, manager of payment card operations at CITGO. "We've already had a terrific response from the people who have started using the materials."
He added, "By taking advantage of the in-person training sessions, educational materials available through MarketNet, and the Facility Appearance & Technology fund support CITGO is offering, we are confident that our marketers and retailers will be ready for the July 2010 deadlines. Compliance was a hot topic of discussion among marketers at the 18 roundtable meetings CITGO held recently, so we wanted to provide some tools to help navigate the changing landscape."
In addition to the training and educational materials currently available, CITGO is in the process of selecting a recommended leasing program partner to help marketers and retailers access PCI compliant equipment. CITGO will update the marketer and retailer network as soon as the partner is confirmed, it said.
CITGO, based in Houston, is a refiner, transporter and marketer of transportation fuels, lubricants, petrochemicals and other industrial products. The company is owned by PDV America Inc., an indirect wholly owned subsidiary of Petroleos de Venezuela SA, the national oil company of the Bolivarian Republic of Venezuela.
Members help make our journalism possible. Become a CSP member today and unlock exclusive benefits, including unlimited access to all of our content. Sign up here.