Consultant s Report CITY OF ASHEVILLE, PARKING ACCESS AND REVENUE CONTROL SYSTEM (PARCS) STUDY

Transcription

1 Consultant s Report CITY OF ASHEVILLE, CONTROL SYSTEM (PARCS) STUDY Presented to Mr. Harry Brown Parking Services Manager 45 Wall Street Asheville, SC Phone: (828) Presented by Carl Walker, Inc Cumberland Parkway, Suite 450 Atlanta, GA Phone: Fax: Dated Project S

2 Harry Brown Parking Services Manager City of Asheville 45 Wall Street Asheville, NC Dear Mr. Brown: Thank you for allowing us to review the Parking Access and Revenue Control System (PARCS) at Civic Center, Wall Street, and Rankin Avenue parking garages in downtown Asheville. You were very helpful on our visit to the sites. We are pleased to submit this consultant s report to you. If you have any questions, please call us at (770) After you have had a chance to discuss this internally, Carl Walker stands ready to assist the City with writing PARCS specifications, getting and evaluating proposals, and providing testing. We believe we can provide you with value-added services that get the best price and participation of other manufacturers to provide the best technology. Very truly yours, Carl Walker, Inc. Mark L. Yedinak, CAPP, CPFM, CM, PMP Project Manager / Studies Specialist Enclosure

3 TABLE OF CONTENTS PURPOSE...1 Scope and Objective... 1 Methodology... 1 BACKGROUND...2 Mission... 2 Parking Services Division... 2 Civic Center Garage... 2 Rankin Avenue Garage... 3 Wall Street Garage... 3 Parking Equipment... 4 Cincinnati Systems Inc Amano Cincinnati, Inc... 6 McGann & Associates, Inc... 6 Information Technology... 6 RISK ASSESSMENT...8 PARCS EVALUATION Existing System Alternate Configurations for Wall Street Garage Basic Equipment Requirements Credit Cards Visa Cardholder Information Security Program (CISP) Overview PARCS Estimate Alternate PARCS Estimate REVIEW SUMMARY RECOMMENDATION Appendices A B C D E Maintenance Agreement McGann Software Brochure iparc Brochure Photos Alternate Configurations

4 TABLES Table 1 - Current Parking Rates... 4 Table 2 - Current Parking Equipment Configuration... 5 Table 3 - Risk Assessment Summary Matrix... 9 Table 4 - Capacities and Utilization Table 6 - Carl Walker PARCS Cost Estimate Table 7 - Alternative PARCS Estimate Using AVI Table 8 - Recommendations and Benefits FIGURES Figure 1 - Google Earth Aerial of Asheville... 3

5 PURPOSE The City of Asheville, North Carolina, engaged Carl Walker, Inc., to perform an independent review of the Parking Access and Revenue Control System (PARCS) that is installed at the Civic Center, Wall Street, and Rankin Avenue parking garages. The PARCS controls transient and monthly parking revenue. Scope and Objective We reviewed the policies, procedures, and methods of the PARCS. Our objective was to assess the existing PARCS to ensure the accuracy, completeness, validity, and reliability of equipment and financial information. Our review included assessment and evaluation of general controls; physical and logical access; system documentation; application contingency plans; data backups and disaster recovery plans for the purpose of: Determining whether policies and management procedures were in place and functioning to ensure proper control of the Information Technology (IT) function. Reviewing the Electronic Data Process (EDP) control environment for the purpose of determining the reliability of computer processed data. Evaluating the segregation of duties to determine it is adequate to prevent and/or detect errors and irregularities. Assessing the logical access controls to ensure that it is adequate for preventing unauthorized access and modification of data files and programs. Evaluating the physical controls to determine whether it is adequate in minimizing the risk of accidental and malicious damage or theft of computer equipment and removable media. Assessing computer operations to determine whether appropriate working practices and processes were being followed. Methodology Our methodology consisted of the following: 1. Review existing PARCS equipment. 2. Review PARCS maintenance logs. 1

6 3. Interview owner and parking operator staff regarding management, policies, and procedures. 4. Provide a report of findings and recommendations. BACKGROUND 1 Mission The City of Asheville is dedicated to providing safe, reliable, and efficient parking in downtown Asheville. The City s Parking Services Division provides for the orderly turnover of parking and the maximum utilization of parking spaces. Asheville provides on-street parking as well as three parking garages and several permit lots downtown. Parking Services Division Cashier booths are staffed Monday through Friday from 10 a.m. to 7 p.m. Parking Services attendants do not accept credit or debit cards. During these hours, customers may pay for hourly parking and also pay parking citations. During other hours, payment is made upon exit from the garages at a pay-in-lane device. The amount is a flat fee and depends on the garage as listed below. Cash is accepted for payment when parking garages are not attended. Civic Center Garage The Civic Center Garage is the largest City garage with 550 spaces. The garage is located behind the Buncombe County Public Library off Haywood Street, adjacent to Vanderbilt Apartments and the Asheville Civic Center. There are two entrances to this garage, one entrance off Haywood Street between the library and the Vanderbilt Apartments, and the other is off Rankin Avenue at the rear of the garage. The main vehicle exit is on Rankin Avenue with an exit for permit vehicles at Haywood Street. Pedestrian exits are located at Rankin Avenue, Walnut Street, and on Haywood Street (5 th floor connection with Buncombe County Public Library). Refer to Figure 1. 1 Source: 2

7 Figure 1 - Google Earth Aerial of Asheville Civic Center Garage 550 spaces Rankin Avenue Garage 262 spaces Wall Street Garage 232 spaces Rankin Avenue Garage The Rankin Avenue Garage, with 262 spaces, is located between Haywood Street and Rankin Avenue just north of College Street, with a pedestrian entrance off Haywood Street. There are two entrances, one off Walnut Street and the other off Rankin Avenue. The main vehicle exit is on Rankin Avenue with an exit for permit vehicles on College Street. If the Rankin Avenue garage is full, the Civic Center Garage is immediately next door and often has space available. Wall Street Garage The Wall Street Garage has 232 spaces and is located off Otis Street between Wall Street and Battery Park Avenue, immediately across the street from the Grove Arcade. The entrance to this garage is on Otis Street. The vehicle exit from this garage is located at the corner of Battery Park and Page Avenues. Pedestrian exits are located at Otis Street, Wall Street, and Battery Park Avenue. 3

8 Parking Rates Garage 1st Hour Table 1 - Current Parking Rates Every Hour Thereafter Civic Center $ - $ Rankin Avenue $ - $ Wall Street $ - $ After Hours, Daily Max Weekends, and Holidays $ 1.00 $ 1.00 $ 2.00 Special Events Monthly Rate $ $ 7.00 $ $ $ 6.00 $ $ $ 6.00 $ Under the Division Director of Parking and Transit, the Parking Services Manager is responsible for the following: Manage, operate, and maintain parking areas that provide public and monthly parking. Collect, deposit, and report all revenues accurately, in a timely manner. To perform the above-mentioned activities, all of which involve a high volume of cash transactions, the City must maintain a distinct internal control structure. As a cornerstone of the internal control structure, the City operates the Parking Access and Revenue Control System (PARCS). The PARCS is an on-line, real-time system that supports numerous terminals, point-of-sale workstations, printers, ticket issuing machines, and card readers. The PARCS was developed by Amano-McGann, parking lane equipment and software providers, respectively. It was installed and is maintained by Cincinnati Systems, which is an authorized Amano- McGann distributor with headquarters in Greenville, South Carolina. Parking Equipment The parking equipment installed at the garages is shown in the table below. 4

9 Table 2 - Current Parking Equipment Configuration Parking Deck TIM ECR XCR POF PIL CT Gate FULL Rankin Civic Center Wall Street Totals TIM = Ticket Issuing Maching ECR = Entry Card Reader XCR = Exit Card Reader POF = Pay-on-Foot Terminal PIL = Pay-in-Lane Device CT = Cashier Terminal Gate = Automatic Gate and Arm FULL = Full Sign Cincinnati Systems, Inc. Cincinnati Systems, Incorporated, was established in 1960 as a distributor for Cincinnati Time Recorder products in northern South Carolina. As a result of a merger in 1983, Cincinnati Systems was acquired by CTEC of Charlotte, North Carolina, in a move that would prove to stimulate growth and expand product lines and services. CTEC was founded in 1959 as a Time and Parking Control Equipment dealership and has managed its product lines and services into the largest parking control, access control, and time and attendance dealer in the southeast. Cincinnati Systems is the largest U.S. distributor for Amano-Cincinnati, Incorporated (a global corporation originated in the 1890 s). With its headquarters located in Charlotte, Cincinnati Systems is a multi-million dollar organization with offices strategically positioned throughout the southern and eastern United States. Primary support is provided to North Carolina, South Carolina, Georgia, Virginia, Pennsylvania, Delaware, New Jersey and Texas. Cincinnati Systems attributes this growth to its commitment to customer service. With more than 100 highly skilled service and support people to meet customer requirements, Cincinnati Systems built a reputation over the past decades of providing its clients with innovative services and state-of-the-art products that keeps them ahead of the times. The success of CTEC and Cincinnati Systems is based on a dedication to quality, customer satisfaction, and long-term performance. Cincinnati Systems provides preventive and reparative maintenance services to the City through a contract that is in its sixth year. The City s parking supervisors are proficient at firstlevel response to parking equipment problems. First-level response includes loading low or depleted parking tickets, clearing ticket jams, swapping damaged or defective monthly proximity cards, replacing broken gate arms, and replacing print ribbons. Cincinnati Systems was unable to provide a list of maintenance records for the City s parking garages, and the City does not maintain a log of service calls. The City provided Carl Walker with a copy of its 5

10 parking maintenance agreement with Cincinnati Systems, dated July 15, 2007, for $41,104. This agreement provides for monthly preventive maintenance as well as replacement of all replacement parts with the exception of reconditioning. We commend the City for having this agreement. Refer to Appendix A. Amano Cincinnati, Inc. For more than 40 years, Amano has delivered innovative technology solutions for the time, parking, and access control markets. Amano Cincinnati is a subsidiary of Amano Corporation Japan and a member of the world-recognized Amano Group. As such, Amano Cincinnati benefits tremendously from the influence and support of a global business generating in excess of $500 million in annual revenues and 2,300 employees worldwide. 2 McGann & Associates, Inc. Since their incorporation in 1982, McGann has become the leader in the design and development of standard, specialized, and customized application software for parking. With one of the largest teams of software engineers, system analysts, technical writers, and support specialists, and with over 4,000 installations in North America they are the largest independent developer of parking software in the industry. McGann sells and services through both branch offices and independent distributors. 3 Information Technology The current version of Parking Access and Revenue Control System (PARCS) was installed approximately seven years ago. The PARCS is based on magnetic-stripe technology. The AGP-2000 series Ticket Issuing Machine (TIM) is designed for multiple uses, typically at the unattended entrances of a parking facility. The PARCS presently in place represents a product line that consists of both hardware and software components and used by Amano-McGann clients located throughout the US. The PARCS is an on-line, real-time system that supports the business functions performed by a parking operator. Parking operations supported by the PARCS include: management and control over revenue capture and analysis, lane equipment status, space control, validations, and monthly parking access control. The McGann Signature software is a scaleable, PC-based software system that provides comprehensive control of all the activities in a parking facility, along with supervisory checks and balances and data acquisition. Scaleable means that additional devices can be added to the system without significant software modifications and additions. This versatile system is based on client/server architecture and incorporates open system technologies. 2 Source: 3 Source: Press release dated May 9, 2007, announcing the acquisition of McGann by Amano USA Holdings, Inc. 6

11 Client-server is computing architecture which separates a client from a server, and is almost always implemented over a computer network. Each client or server connected to a network can also be referred to as a node. The most basic type of client-server architecture employs only two types of nodes: clients and servers. This type of architecture is sometimes referred to as two-tier. It allows devices to share files and resources. 4 The core system provides a report generator with a host of standard reports, including comprehensive transaction reports, exception reports, and activity reports on all the control devices in the system. In addition, the report generator can access the database tables to configure reports from most popular report writers. This allows users to enter and edit payments and charges, generate accounting and transaction reports, and set-up accounts. McGann s Signature software is designed to run on Windows NT, which is no longer supported by Microsoft. A stop-gap measure was used by Cincinnati Systems to allow Signature to run on Windows XP. Signature is no longer supported by McGann. The current McGann software is called Professional. A brochure on Professional can be found in Appendix B. Amano Cincinnati also provides a facility management suite of software called iparc. A brochure on iparc can be found in Appendix C. The following summarizes the key functions of the PARCS. Ticket Issuing Machines (TIMs) Better known as ticket dispensers, TIMs provide a parking ticket at the entrance of the parking areas upon the arrival of a vehicle at the entry lanes. Typically the parking tickets are time-stamped, bar-coded, or magnetic-stripe for automatic reading by a device. Cashier Terminals (CTs) and Patron Fee Displays (PFDs) provide ticket transaction processing at the exit lanes which include the following: Reading the magnetic parking ticket, ID and non-revenue badges, and credit cards Performing fee calculation Verifying validity of parking tickets (e.g., stolen ticket) Verifying validity of the credit card presented by the patron (currently not enabled) Displaying the fee, change due, and time of exit Communicating with the host computer in order to obtain an authorization from the credit card companies via a service center. The CTs continue to perform these functions even if communication with the central computer is broken. These functions are performed in either on-line or off-line modes. After operating in the off-line mode, the system uploads the transaction data when online connectivity is restored. 4 Source: 7

12 Automatic Gates and Non-Reset Counters provide the necessary restraint control to track vehicles entering and exiting the parking areas for reconciliation purposes. Automatic Vehicle Identification (AVI) provides an automatic identification of monthly parkers and allows service vehicles equipped with special devices called transponders to enter and exit the parking areas separate from transient parkers. Currently, this feature is not in use at the City s garages. Instead, monthly parkers use a proximity card reader to enter and exit the facilities. These are sometimes co-located with TIMs and CTs and at other locations they are dedicated to monthly parking use only. RISK ASSESSMENT Parking at the City s garages represents a large, consistent revenue base which requires strong internal controls to ensure that the City collects, deposits, and reports all revenues appropriately. The high volume of cash transactions can provide dishonest cashiers, supervisors, management, or patrons opportunities for misappropriation if proper controls are not in place. Similar to other cash intensive point-of-sale operations, public parking must be supplemented with comprehensive internal control procedures designed to deter, prevent, detect, and correct unauthorized activities and transactions. Parking revenue risk potential can be generally categorized into one of the five major categories identified below. Most of these risk areas can be exploited by someone working alone or working in collusion with others. However, each of these categories can be reduced through proper implementation of the computerized and manual controls, checks and audit trails. 8

13 Table 3 - Risk Assessment Summary Matrix Revenue Risk Category Example Control Methods Operator defrauds Contract operator Detailed contract Administration and the Owner understates revenues collected administration and financial report reviews Periodic contract administration inspections/audits Non-reset gate counters and space/load control Management or Supervisors defraud Operator Cashier defrauds the Operator Managers defraud the operator through collusion with supervisors Cashier collects cash and does not report this collection or reports the collection as a non-revenue transaction Separation of duties for cash handling Independent review of PARCS reports and non-reset gate counters Reduce opportunities for exception transactions Integrate credit card processing into PARCS Generate and review detailed cashier shift reports and investigate all exceptions and discrepancies Patron defrauds Operator Patron utilizes a swapped / stolen ticket or exits the lot via an unauthorized method (i.e., bypassing exit booths) Strong physical security throughout lot perimeter Stolen ticket and hot plate files in the PARCS Space and load control Cashier defrauds Patron Cashier collects a patron s money and processes the transaction for less than the collected fee Patron fee display Patron insertion of ticket into external booth-mounted automated scanner Automatic receipt provided from external booth-mounted printer 9

14 The foundation for attaining strong internal controls is an automated revenue control system that programmatically forces cashiers, supervisors, and management to adhere to specific activities, i.e., transaction processing as approved by management. Additionally, the PARCS must provide for a protected and detailed audit trail of all activities. Once a comprehensive PARCS is in place, management controls such as PARCS reports, reviews, manual procedures, supervisory audits, and exception ticket handling are important to secure the internal control environment. PARCS EVALUATION Existing System The existing Amano-McGann parking system is more than 7 years old; however, the central software is obsolete. Photographs of the parking equipment can be found in Appendix D. The version of the PARCS software is of McGann (probably installed around 2000), making the software at least 7 years old. This version of software is no longer supported by McGann. Amano-Cincinnati offers two software products that should be considered: the newer McGann Professional and the Amano product called iparc. The City pre-sells validation stamps and scrip for the Hamilton pay-in-lane machines to businesses in Asheville; therefore, automatic billing for validations is not needed. The City of Asheville maintains waiting lists for parking garage permits and offers available permits solely to those who have placed their names on these lists. Permits are offered on a first-come-first-served basis. Table 4 - Capacities and Utilization Garage Built Spaces Monthly Permits for Sale Monthly Permits Sold Waiting List Wall Street Civic Center Rankin Avenue By upgrading or replacing the existing PARCS with a new system at the City s garages, Asheville will have the most current software available and latest in microprocessor-controlled lane equipment. We cannot ensure that revenues will increase but what we can say is that transaction times can be reduced, monthly exit throughput can be increased with Automatic Vehicle Identification (AVI), transient throughput can be increased by having automatically read magnetic-stripe tickets, back-office validation invoicing operations can be simplified, problems with defective or damaged proximity cards can be eliminated, reporting problems can be corrected, and equipment malfunctions can be reduced. 10

15 Alternate Configurations for Wall Street Garage Although it is not in our scope of work, Carl Walker examined two alternate configurations for the Wall Street Garage. These appear in Appendix E. We did this in an attempt to improve the bottleneck that regularly occurs at the exit. Because of the configuration of the exit lanes, backups regularly occur when only three cars are in the queue. The configuration of the garage will also help with determining the type of parking equipment to specify. The Wall Street Garage primarily serves the Grove Arcade to the north and the restaurants on Wall Street to the south. A secondary destination is the Federal building to the west of Otis Street. Although it would be well suited for monthly parkers only, its high turnover means the City must minimize the number of monthly parkers sending them primarily to the Civic Center Garage. Both options are color-coded to show where parking is located. Red indicates a down ramp and green indicates an up ramp. Red and green arrows show the direction of travel and cross-over points. The blue cloud shows an area where changes to the configuration could possibly occur. Option A In Option A, drawing S-1, the entry from Otis Street is converted to an exit. A portion of the parapet wall is removed to provide a cashier exit equipped with a pay-in-lane machine. The existing entry lane is converted to a monthly-only exit. Aligned with the existing T-column, an island would be constructed for a new cashier booth adjacent to a 10-foot wide exit lane, followed by a three-foot island, another 10-foot wide monthly exit, and a seven-foot sidewalk. During peak exit periods, customers should be encouraged to make a right turn onto Otis Street. Striping is reversed from the cross-over point west to the stairway. Striping for about 10 spaces on the south side of the slab on grade is removed to provide a queue. The striping for the remainder of the Level 1 and Level 2 ramps is unchanged. In Option A, drawing S-2, the existing exit lanes are reversed and converted to entry lanes. A slight re-alignment of the lanes may be necessary. The three handicapped parking spaces are re-striped to 90 and they become clearly visible to entering vehicles whereas they are blocked by the stairway as currently configured. The striping for the remainder of the Level 3 and Level 4 ramps is unchanged. Note the dead-end area on Level 4 as indicated by the doted green arrow. Option B In Option B, the existing entry and exit lanes remain and all of the striping is reversed except for Level 1. As seen in Option B, drawing S-2, this provides for a straight queue to the exit lanes from the up ramp versus the current S maneuver needed to approach the exit. By relocating the stairway door from the north side to the east side, two exit lanes can queue. 11

16 The pros and cons of these two options are shown in the table below. Option Pros Cons A Change the entry and exit lanes. Keep the primary flow of traffic. Minimize striping changes. Provides for a potential exit onto Battery Park Avenue. Exit onto Otis Street has potential traffic and safety implications. Some loss of space at exit. B Reverse striping in the garage. Provide queue area and straight exit for two lanes. No need to change entry and exit configuration. Basic Equipment Requirements Re-striping entire garage is difficult and expensive. Each garage should be equipped with a least one pay-in-lane devices (to be installed at each cashier booth) to allow for the collection of parking fees during the hours that the exit booths are not staffed. Currently, there are Hamilton pay-in-lane devices. Hamilton is best known for providing car washing systems. Pay-in-lanes devices are capable of capturing and storing parking tickets while Hamilton is not. Pay-in-lane technology is emerging for unattended operations. These devices can be configured to accept credit cards, smart cards, debit cards, merchant validations, vouchers and currency, and provide change. Each device can provide exit cashiering and pre-pay entry. For entry operations, the parking fee is a programmable flat fee. Change can be issued in coins and receipts are provided on demand or automatically. The device can be optionally configured with a journal printer or intercom. The cost of these devices is about $25,000 installed. The City may want to consider installing two pay-on-foot (POF) machines (Automatic Pay Stations or APS), in the Wall Street Garage, one near the existing exit lanes and a second near the stairway at the Otis Street entry lane. This means that delays caused by patrons attempting to insert coins or bills into a machine can be relocated from the exit lane to a POF location. 12

17 Automatic pay-on-foot (POF) machines are designed to allow users to pay for their parking prior to arrival at the exit, and to exit without having to be processed by a cashier. As with express credit card lanes, a POF system allows customers to avoid waiting in line for a cashier, increases the throughput capacity of an exit plaza (because automated transactions are typically faster), and can facilitate staff reductions. A number of payment modes can be provided at pay-on-foot stations including: coins, bills, bank credit cards and/or several varieties of stored-value cards (decrement cards). Customer receipts can be printed upon request. Automatic pay-on-foot machines normally include the following: Color visual display Single coin slot for eight denominations of coins (extendable to 16) Push-button for cancellation, push-button for receipt, push-button for speech intercom Reader (tickets, subscription cards, bank cards) Receipt printer Journal printer Pay-on-foot terminals tend to be rather expensive, ranging from $35,000 to $85,000, depending on configuration. In addition, if they are configured to accept currency and provide change, there is an added cost of collecting and refilling change. Unless all pay-onfoot machines are limited to Credit Card Only mode, our experience is that is a savings with labor reduction, which, over time, could be substantial. This savings is somewhat negated by the time required to regularly service POF machines (empty cash and replenish change) but is not a factor in credit card only machines. Implementation of a pay-on-foot system requires much more effort and a much higher level of communication than other payment options. Unlike the credit card express option, customers who want to use the pay-on-foot system must take their tickets with them when they go to their destination. This increases the frequency of lost tickets at the exit and, as a result, can occasionally increase rather than decrease exit delays. It also increases the need for additional signage advising or reminding those customers that they must take their ticket with them in order to use the pay-on-foot machines. This education and communication is not as critical when the system is not an exclusive pay-on-foot system and other options, including cashiered lanes, are still available. 13

18 Credit Cards There are two options for this automated payment mode: CREDIT CARD ONLY Under the first option, called TICKET IN/CREDIT CARD OUT all parkers enter the facilities by taking a ticket from a ticket issuing machine at the entry point. At the exit, that ticket is inserted into an automatic reader, to compute the duration of stay and fee. It is followed by insertion of the customer s credit card, which is automatically charged for the parking fee. This option does not require any special configuration of the entry lane equipment. Under the second option, called CREDIT CARD IN/OUT, customers can insert a credit card into a special reader at the entrance (no ticket issued). The date and time of entry is stored in a central computer. When those customers exit, they use the same credit card at an automatic pay station located at the exit. The fee is computed from the time elapsed since the card was initially inserted into the entry reader. Because the system does not know whether an arriving customer intends to take a ticket or insert a credit card, automatic ticket dispensers cannot be used in entry lanes that accept credit cards. In those lanes the ticket dispensers must be equipped with a push button that the customer must press to produce a ticket. If the customer inserts a credit card instead of pushing the button, no ticket is issued. Entry transactions using ticket dispensers equipped with push button ticket dispensers normally take longer than transactions with dispensers that issue tickets automatically as each vehicle pulls into the entry lane. That affects the number of lanes and queuing capacity needed at the entry point and will slow the peak entry flow of the Elm Street Parking Garage. While we recognize that it may be beneficial to have credit card in/out capabilities, limited exit lane and queuing capacity at the entry points may not support that option. If the overall revenue control system will support unmanned express lanes, the recommended option is to continue issuing tickets to each entering customer automatically. This will still provide the option of automated payment by credit card at the exit, while avoiding potential delays at the entry plaza. It also allows an exit options for all customers in the event of a failure of the credit card system because all customers will have tickets that can be processed at a cashiered exit. 14

19 When the City installed the PARCS, no provisions were made to accept credit cards for payments using the cashier terminal. With integrated credit card acceptance at the cashier terminal, transaction time is reduced and the chances for errors are reduced. The credit card system must be compliant with the Visa Cardholder Information Security Program (CISP). Visa Cardholder Information Security Program (CISP) Overview The Payment Card Industry (PCI) Data Security Standard is a result of collaboration between Visa and MasterCard to create common industry security requirements. Other card companies operating in the US have also endorsed the standard within their respective programs. These 12 requirements are the foundation of Visa s CISP. The CISP is designed to ensure the highest standard of due care to help keep sensitive cardholder data safe from hackers and fraudsters. PCI Data Security Standard Build and Maintain a Secure Network 1. Install and maintain a firewall configuration to protect data 2. Do not use vendor-supplied defaults for system passwords and other security parameters Protect Cardholder Data 3. Protect stored data 4. Encrypt transmission of cardholder data and sensitive information across public networks Maintain a Vulnerability Management Program 5. Use and regularly update anti-virus software 6. Develop and maintain secure systems and applications Implement Strong Access Control Measures 7. Restrict access to data by business need-to-know 8. Assign a unique ID to each person with computer access 9. Restrict physical access to cardholder data Regularly Monitor and Test Networks 10. Track and monitor all access to network resources and cardholder data 11. Regularly test security systems and processes 15

20 Maintain an Information Security Policy 12. Maintain a policy that addresses information security PARCS Estimate Using base pricing typical of recent projects, we prepared the following PARCS cost estimate. If the City decided not to purchase the two pay-on-foot machines immediately for the Wall Street Garage, the total estimate to replace all equipment in the three garages is $307,

21 Table 5 - Carl Walker PARCS Cost Estimate Qty Description Unit Extended Price Price Lane Equipment 5 Ticket Issuing Machine, Magnetic Stripe $ 19,381 $ 96,905 5 Pushbutton Option $ 161 $ Standard Programming $ 171 $ Cashier Terminal $ 23,895 $ 95,580 4 Merchants Option, 264 Total $ 2,262 $ 9,048 4 Communication Option $ 802 $ 3,208 4 Credit Card Networking Option $ 2,923 $ 11,692 4 Patron Fee Display $ 2,349 $ 9,396 4 Voucher Option $ 3,198 $ 12,792 4 Burster Option, Validator $ 3,464 $ 13,856 4 Parker Option, Validator $ 888 $ 3,552 4 Below Counter Ticket Vault Option $ 2,488 $ 9,952 3 Pay-in-Lane, Credit Card Option $ 26,250 $ 78,750 3 Journal Printer, Pay-in-Lane $ 1,155 $ 3,465 3 Bill Cash Vault with Lock $ 578 $ 1,734 3 Pay-in-Lane Coin Changer Option $ 500 $ 1,500 5 FULL Sign $ 645 $ 3, Automatic Gate $ 3,974 $ 43, Configuration Package, Gate Standard Program $ 166 $ 1,826 Pay-on-Foot 2 Automatic Pay Station (APS) $ 41,514 $ 83,028 2 Base, ADA, APS $ 2,040 $ 4,080 2 Communication Option, APS $ 742 $ 1,484 2 Lost Ticket Options, APS $ 4,178 $ 8,356 2 Voucher Option, APS $ 2,966 $ 5,932 2 Internal Journal Printer Option, APS $ 1,596 $ 3,192 2 Parker Option, APS $ 888 $ 1,776 2 Voice Annunciation Package, APS $ 1,311 $ 2,622 2 Multi-lingual Display Option, APS $ 102 $ Coin Handling Option, APS $ 5,852 $ 11,704 2 Option 3 Standard Coin Hoppers, APS $ 2,549 $ 5,098 2 Coin Acceptor, APS $ 1,132 $ 2,264 2 Note Acceptor Package, APS $ 16,301 $ 32,602 2 Note Dispenser Option, APS $ 10,800 $ 21,600 2 Note Dispenser Options Second (#2), APS $ 10,800 $ 21,600 4 Cash Vault, 1000 Note Capacity with Lock, APS $ 4,670 $ 18,680 1 Note Dispenser Cassette Unlocking Plate, APS $ 140 $ 140 Central Computer and CISP Credit Card Compliance 1 Central Computer Software $ 32,150 $ 32,150 1 Central Credit Card Processing $ 12,077 $ 12,077 4 Computer System with Laser Printer $ 1,995 $ 7,980 3 Netport No-Poll Assembly $ 3,800 $ 11,400 3 NETePay Host Base $ 2,907 $ 8,721 Proximity Reader Memory Upgrade to 16K 10 Proximity Reader $ 295 $ 2,950 Total Equipment Cost $ 701,495 Contractor Use Tax and Freight Allowance $ 34,470 Installation, Loops, Training $ 67,065 Discounts $ (350,748) Adjusted Total $ 452,282 17

22 Alternate PARCS Estimate In the alternate PARCS estimate below, we have included Automatic Vehicle Identification (AVI) readers in lieu of proximity card readers for monthly parkers. These readers use AVI technology like that for toll roads. If a monthly customer does not have a transponder, one can be purchased for about $12. AVI systems can be interoperable with tolls, parking, access control, and fee calculation. In account-based processing, transponders act as account identifiers. Payments are processed off the account via back-office operations. In systems with both front-end (transponder) and back-end (account) storing of balances, lost, stolen or damaged transponders can be disabled and replaced with another using the last known balance. AVI provides a more customer-friendly system while improving security at the same time. Customers do not need to stop or roll down windows and, therefore, driver safety is enhanced by allowing the operator to keep hands on the wheel and eyes on the road. It also reduces vehicle queues during peak exit demand periods. 18

23 Table 6 - Alternative PARCS Estimate Using AVI Qty Description Unit Extended Price Price Lane Equipment 5 Ticket Issuing Machine, Magnetic Stripe $ 19,381 $ 96,905 5 Pushbutton Option $ 161 $ Standard Programming $ 171 $ Cashier Terminal $ 23,895 $ 95,580 4 Merchants Option, 264 Total $ 2,262 $ 9,048 4 Communication Option $ 802 $ 3,208 4 Credit Card Networking Option $ 2,923 $ 11,692 4 Patron Fee Display $ 2,349 $ 9,396 4 Voucher Option $ 3,198 $ 12,792 4 Burster Option, Validator $ 3,464 $ 13,856 4 Parker Option, Validator $ 888 $ 3,552 4 Below Counter Ticket Vault Option $ 2,488 $ 9,952 3 Pay-in-Lane, Credit Card Option $ 26,250 $ 78,750 3 Journal Printer, Pay-in-Lane $ 1,155 $ 3,465 3 Bill Cash Vault with Lock $ 578 $ 1,734 3 Pay-in-Lane Coin Changer Option $ 500 $ 1,500 5 FULL Sign $ 645 $ 3, Automatic Gate $ 3,974 $ 43, Configuration Package, Gate Standard Program $ 166 $ 1,826 Central Computer and CISP Credit Card Compliance 1 Central Computer Software $ 32,150 $ 32,150 1 Central Credit Card Processing $ 12,077 $ 12,077 4 Computer System with Laser Printer $ 1,995 $ 7,980 3 Netport No-Poll Assembly $ 3,800 $ 11,400 3 NETePay Host Base $ 2,907 $ 8,721 AVI for Monthly Parkers 10 Automatic Vehicle Identification (AVI) Reader $ 4,900 $ 49,000 0 Converter to Re-use Toll Tag Transponders) $ Cables, Transformers, Mounting Hardware $ 195 $ 3,315 Total Equipment Cost $ 526,498 Contractor Use Tax and Freight Allowance $ 25,871 Installation, Loops, Training $ 50,335 Discounts $ (263,249) Adjusted Total $ 339,455 19

24 REVIEW SUMMARY PARCS Weaknesses PARCS Strengths Current inability to accept credit cards for parking fees. Physical configuration of the exit lanes at the Wall Street Garage. While performing our review, we observed positive influences upon the PARCS internal control environment. We have identified these influences below. 1. We recommend that the City continue to move forward with this PARCS replacement. 2. The City s parking management team is cognizant of the priority placed on customer satisfaction. We found the staff to be helpful and providing a high level of customer service. Opportunities for Improvement 3. The maintenance agreement provides some assurance to the City that parking equipment remains operational, despite its age. While performing our review we noted one non-critical issue which we considered an opportunity for improvement of the PARCS control environment. The periodic preventive maintenance program helps ensure the longevity of the PARCS. However, neither the City nor the maintenance provider keeps electronic records on service calls and preventive maintenance. To assure the City is receiving the best service available, it is recommended that a database be created and each maintenance service request be entered into it. RECOMMENDATION Planned enhancements to the PARCS should be made to take full advantage of the capabilities of the application and maximize its operational effectiveness. Table 7 - Recommendations and Benefits Recommendation Process credit card transactions through the lane equipment Implement an Automatic Vehicle Identification (AVI) system for monthly parkers Consider adding credit card exit lanes Implement the latest version of central computer software Benefit Provides for increased revenue, customer service, and options for payment Increases throughput rates, convenience, and safety Separate credit card processing from cash operations to improve exit throughput Improve operational and revenue reports 20

25 Recommendations are as follows: 1. Purchase and install 3 pay-in-lane machines that accept credit cards only. 2. Purchase and install 2 pay-on-foot machines that accept cash, coins and credit cards and provide change in two bills ($1 and $5 denominations) and change (quarters, nickels, and dimes) in the Wall Street Garage. Install appropriate signage directing cash customers to pay-on-foot stations and credit card customers to either POF or payin-lane. 3. Automate validations. 4. Implement an AVI system for monthly parkers. 21

26 APPENDIX A Maintenance Agreement 22

27 STATE OF NORTH CAROLINA COUNTY OF BUNCOMBE PARKING MAINTENANCE CONTRACT THIS PARKING MAINTENANCE CONTRACT, made and entered into this _15_ day of _July_ 2007, by and between the City of Asheville, a municipal corporation organized and existing under the laws of the State of North Carolina (hereinafter referred to as City )),and CINCINNATI SYSTEMS, INC., 107 Legrand Blvd, Greenville, SC hereinafter referred to as ( CINCINNATI SYSTEMS, INC )). W I T N E S S E T H : Upon the terms and conditions hereinafter set forth, the City has requested and CINCINNATI SYSTEMS, INC has agreed to furnish the City with maintenance services as set forth in this contract. The City and CINCINNATI SYSTEMS, INC agree as follows: A. TERMS AND CONDITIONS. 1. CINCINNATI SYSTEMS, INC shall provide professional consulting services as set forth in Exhibit A (CINCINNATI SYSTEMS, INC proposal of July 1, 2007). 2. The term of this contract shall be from until completion. 3. The City will compensate the CINCINNATI SYSTEMS, INC a maximum amount of $_41, The CINCINNATI SYSTEMS, INC shall bill the City on a monthly basis. If the contract exceeds the aforementioned threshold, the City must amend or renew the contract in accordance with all applicable City policies. 4. The CINCINNATI SYSTEMS, INC shall provide a timekeeping record of all hours worked and description of the duties performed during the hours worked. All timesheets shall be submitted to the Parking Services Manager or his or her designee for review and payment of services. These time sheets shall be submitted on a monthly basis. The City shall pay all invoices within thirty (30) days of submittal. 5. Any employees furnished by CINCINNATI SYSTEMS, INC, pursuant to this contract, will be employees of CINCINNATI SYSTEMS, INC, an independent contractor. CINCINNATI SYSTEMS, INC will maintain complete control over the employees conduct and will disburse all payrolls, taxes, license, insurances, uniforms and all other expenses incurred by CINCINNATI SYSTEMS, INC in performing the terms of this contract. DAP Security contract

28 6. For the purposes of this contract, CINCINNATI SYSTEMS, INC shall provide for $1,000,000 in general liability insurance naming the City of Asheville as an additional insured. Additionally, CINCINNATI SYSTEMS, INC will provide Workers Compensation Insurance for its employees. A copy of said coverages shall be provided to the City s Risk Management Office. 7. CINCINNATI SYSTEMS, INC shall indemnify, defend and hold harmless the City and its subsidiaries, divisions, officers, directors and employees from all liability, loss, costs, claims, damages, expenses, attorney fees, judgments and awards arising or claimed to have arisen, out of injury caused by, or allegedly caused by, either in whole or in part, an act or costs, claims, damages, expenses, attorney fees, judgments and awards arising or claimed to have arisen, out of injury caused by, or allegedly caused by, either in whole or in part, an act or omission of any employee of CINCINNATI SYSTEMS, INC. CINCINNATI SYSTEMS, INC shall indemnify the City in all instances except where the City causes injury to a CINCINNATI SYSTEMS, INC employee by some negligent act or omission. 8. Nothing herein shall be construed as a waiver on the part of the City to any defense of any claim, including, but not limited to the defense of governmental immunity. B. TERMINATION AND MODIFICATION. This contract may be terminated by either party, with thirty (30) days prior written notice. Notice shall be served under this contract by registered mail, certified mail or by other means. C. ENTIRE AGREEMENT This agreement contains the entire agreement between the parties. D. SEVERABILITY Should any provision or provisions contained in this agreement be declared by a court of competent jurisdiction to be void, unenforceable or illegal, such provision or provisions shall be severable and the remaining provisions hereof shall remain in full force and effect. E. GOVERNING LAW This contract is entered into in North Carolina and shall be construed under the statutes and laws of North Carolina. F. ASSIGNABILITY This contract is not assignable by either party without the prior written consent of the other party. G. REQUIREMENT OF CITY CONTRACTS 1. CINCINNATI SYSTEMS, INC shall comply with the provisions of the Americans with Disabilities Act and all rules and regulations promulgated DAP Security contract

29 thereunder. CINCINNATI SYSTEMS, INC hereby agrees to indemnify the City from and against all claims, suits, damages, costs, losses and expenses in any manner arising out of or connected with the failure of CINCINNATI SYSTEMS, INC, its subcontractors, agents, successors, assigns, officers or employees to comply with the provisions of the ADA or the rules and regulations promulgated thereunder. 2. CINCINNATI SYSTEMS, INC will comply with the City s Drug Free Workplace policy. This contract shall become binding upon both parties upon being executed by a duly authorized officer of each party on the date first above written. Attest: CITY OF ASHEVILLE Keisha Lipe, City Clerk (official seal) By: Gary W. Jackson City Manager CINCINNATI SYSTEMS, INC, INC BY: DAP Security contract

30 ******* STATE OF NORTH CAROLINA COUNTY OF BUNCOMBE I, Notary Public of the County and State aforesaid certify that Keisha Lipe, personally came before me this day and acknowledged that she is the City Clerk of the City of Asheville, a municipal corporation, and that by authority duly given and as the act of the corporation the foregoing instrument was signed in its name by its City Manager and attested by herself as its City Clerk. Witness my hand and notarial seal this day of, STATE OF COUNTY OF Notary Public My Commission Expires: ******* I,, a Notary Public for said County and State, do certify that, personally came before me this day and acknowledged that he/she is of and acknowledged, on behalf of, the due execution of the foregoing instrument. Witness my hand and notarial seal this day of, Notary Public My Commission Expires: DAP Security contract

31 APPENDIX B McGann Software Brochure

32 SOFTWARE ENGINEERED FOR THE HUMAN ENVIRONMENT

33 U THE MCGANN EXPERIENCE Welcome to a company with deep roots in the parking industry. Nurtured by technology, practical experience and vast industry knowledge, McGann Software has grown strong and tall, casting our shadow throughout the industry with over 3,400 installations worldwide. From the early days of DOS through expanding generations of Windows, we ve had the same software developing team, gaining experience and moving the industry forward. The rings in the tree represent over 20 years of dedicated service, exclusively for the parking industry. We know the day-to-day problems you face. And we respond with proven solutions to help increase your revenue and streamline your operation present

34 McGann Professional was developed in Minneapolis, Minnesota USA by the industry s most experienced staff of software engineers. Moving Parking Software To The Next Level Our latest innovation is the result of over five years of intense development. McGann Professional builds on our full-featured product. With added enhancements and the latest Windows technology, it makes the best even better. It s a totally retooled software suite for more reporting Internet connectivity new audit controls and total flexibility to manage all aspects of your parking operation. McGann Professional. Backed By McGann s Professionals. McGann Professional was developed in Minneapolis, Minnesota USA by the industry s most experienced staff of software engineers. As always, you get McGann s unequaled support, service, and training. If you want faster information with the most advanced communication tools, go Professional. Upgrade your parking operation and your profits with the advanced McGann Professional. Although McGann Professional features a new look, it has a familiar feel that s consistent with our existing product. If you ve invested in McGann software, you can migrate to McGann Professional with ease. nparalleled Parking Experience 3

35 Par INTERNET CONNECTIVITY All the tools of the information age MCGANN BUSINESS ALERTS Master Your Business with the MBA i-client A Mobile Solution for the Manager On the Go MBAs are an innovative new way to preprogram reports, alarms and statistics and have them automatically sent to your PC or wireless PDA. With McGann Professional Internet connectivity, management receives pertinent information anywhere. No longer do you have to sit behind a desk to manage occupancy, attendant efficiency, daily revenue statistics, alarm conditions and more. You can do it anywhere. Authorized staff is always in the know. You re alerted if a gate is up too long. You know how much revenue was collected today. The new MBA Wizard makes programming easy. Information can be sent to one or more individuals. And MBAs can be sent on any time schedule you want. MBAs are just another example of how McGann continues to push technology forward, developing solutions that dramatically improve the way you manage your business. i-client is a wireless Internet workstation that provides the right information right now. Used with today s revolutionary wireless devices, parking managers literally have information in the palm of their hands through their mobile phone or Palm handheld connecting with McGann i-client facility management software. It s the wireless way to get real-time, missioncritical information to mobile users quickly and easily. It improves operational efficiency and leads to smarter business decisions. McGann i-client offers data with rich graphic display, flexible input, easy interaction, and wireless security. It presents complete information so you can manage multiple facilities from anywhere: Look up contract parker information. View real-time facility counts. Monitor equipment. Check real-time revenue performance. View cardholder history. Run mixed-use reports. 4

36 COMPREHENSIVE REPORTING Bottom line, McGann Professional reporting makes managing your business easier than ever. The reporting system that revolutionized parking software is even better and more flexible With new report macros improved selection and sorting features and convenient drill-down data review. McGann Professional comprehensive reporting tools provide the best in audit control and statistical reporting. The McGann Microsoft SQL Server database records all parking activity for historical and ad-hoc reporting. McGann Professional is built to leverage the capabilities of Internet connectivity. Although it operates independently of the Worldwide Web, it offers a world of Internet supported features. It has the connectivity to transmit real-time report information to desktop PCs and wireless PDAs so you re always on top of every situation. Bottom line, McGann Professional reporting makes managing your business easier than ever. SQL Server database offers endless reporting options User can save custom SQL reports Improved selection and sorting features NEW! Scheduled Report Macros Automate routine reports by creating a Macro with pre-selected parameters Run automatic reports on your schedule by teaming Macros with McGann Business Alerts Reduce errors and time spent entering selection data Send Macro-created reports to any printer or choose to send them by Context sensitive help User definable default dates/times and devices are automatically entered in report screens Pop-up calendar makes date selections easy User definable report titles and subtitles for reports Cascade or tile windows Expanded userselectable report parameters Search Expert available in preview window Report descriptions Export reports to or common data format files Convenient drill-down data review Reports can be run for userselectable time windows (e.g. 8:00 am to 5:00 pm each day of the report period) Reports history log stores all actions Graphing report option for select reports Specific days of the week can be selected for reports king Automation with Human Connections 5

37 ADVANCED TECHNOLOGY Raising the bar with the highest technology McGann Professional is the state-of-the-art in parking software, developed by a programming and engineering staff with decades of dedicated experience all in the parking industry. We invested extra effort to design from the ground up, discarding legacy coding and ideas, to use the very latest technologies like the Microsoft SQL Server 2000 Database Management System and.net connectivity. At the same time, we offer a welcome familiarity to our many current users. Convenient, automated database conversion allows faster upgrades from previous McGann products and other systems. The Server That Serves You Best McGann Professional works with the latest Microsoft operating systems: Windows XP and Windows Server The Microsoft SQL Server database is robust, fault-tolerant and scalable to virtually any number of simultaneous users. World Wide Web solutions provide crucial management data to a web browser, cell phone or PDA. Our specialty integration team can custom-tailor an interface to almost any legacy or corporate server whether it s Oracle, DB/2, AS/400, Linux, Unix or virtually any backend system. An SQL Server database is standard. But the system also supports ODBC compliance to auxiliary databases such as Oracle, Informix, Sybase and other RDBMS databases. Professional Performance McGann Professional integrates Revenue, Accounts Receivable, Count Monitoring and Access into a single, sophisticated proven product. It offers increased password levels so you can create a hierarchy of user security control. We ve also enhanced the system set-up Wizards with more preprogramming choices for simplified management. The system improves on our advanced Data Management Tools. Built-in utility software allows IT management to maintain and support the system with ease. A scheduler provides automatic back-ups, exporting, and other support features. Convenient Technical Support If you ever need assistance, it s just a click or phone call away. McGann Professional has a built-in product manual with context-sensitive help. You can search, sort, and understand features with ease, which reduces costly training and retraining. Built-in utility software allows IT management to maintain and support the system with ease. 6

38 The Microsoft SQL Server database is robust, fault-tolerant and scalable to virtually any number of simultaneous users. gui tier business tier data tier McGann Reports WIN32 GUI McGann AR Web WIN32 GUI McGann Card Access WIN32 GUI McGann Counts WIN32 GUI McGann Revenue WIN32 GUI McGann Reports Web GUI (ASP.NET) McGann AR Web GUI (ASP.NET) McGann Card Access Web GUI (ASP.NET) McGann Counts Web GUI (ASP.NET) McGann Revenue Web GUI (ASP.NET).NET Web Service McGann Business Alerts McGann Business Logic Module Iterative Diagnostics Interface McGann Reports Data Access Objects McGann AR Data Access Objects McGann Card Access Data Access Objects McGann Counts Data Access Objects McGann Revenue Data Access Objects Database MS SQL Server Database McGann iclient XML TRANSLATION SERVICES MCGANN SECURITY ACCESS MODULE HTTP/TCP/IP TRANSPORT SERVICES lane tier Lane Devices (Readers, Fee Computers, Ticket dispensers) Multi-directional Communications Module Taking High-Tech to the Highest Level 7

39 McGANN SOFTWARE SUITE The Most Extensive Software Suite In The Parking Industry Nothing can match McGann Professional for its rich array of software features. Our software suite gives you the tools to streamline your operation, improve customer satisfaction, and raise your profits. Professional is designed to provide easy access to the information needed to effectively manage your parking operations. McGann Professional is modular in design to meet your exact parking requirements including Revenue and Access Control, Wireless Monitoring, Internet Connectivity, Interactive Way-Finding Signage, Space Management, Valet Cashiering, Hotel Integration, Event Parking Management and more. The most extensive software suite in the parking industry was developed from years of consulting with parking professionals who operate revenue control systems on a daily basis. Their recommendations are reflected in the practical design and operational features that make McGann the leader in software technology and innovation. Our ability to adapt to changing conditions, redesign and retool advanced features and provide sophisticated reporting with redundant audit trails keeps us on the leading edge of technology. McGann also specializes in custom software applications designed to meet the end-users specific operational needs. Creative parking problem solving is what sets us apart. We offer complete in-house development services to meet our customer s exact specifications. McGann s flexibility and experience provides seamless integration to our customer s legacy and custom McGann has developed special systems, setting us interfaces to many auxiliary systems apart from all other parking providers. including payroll, accounting, Our goal is to bring back-office, point-of-sale, technology to the hotel property management systems, forefront of the building security access, industry by improving management s ability one-card applications to utilize interfaces (security access, parking, toll, that are essential transit and more), doctor registry, to the integrity electronic payment, of a seamless parking operation. on-line event ticketing, credit card clearinghouses, Let us assist you in and many others. learning how McGann Professional can have a significant impact on all aspects of your business. The following is an overview of the feature-rich Professional Software modules. McGann Business Alerts (MBA) iclient Mobile Management Here s an innovative way to stay at the forefront of information reporting technology. MBAs send preprogrammed reports, alarms and statistics to your PC or wireless PDA. Even when you re mobile, you can monitor facility occupancy, attendant efficiency, daily revenue, alarm conditions and more. The new MBA Wizard makes programming easy. All it takes is an address and you re linked to the outside world. Information can be sent to an individual or group of individuals. MBAs can generate reports and send updates based upon a specific time of day, day of week, or date. With McGann Business Alerts, parking management is in touch with current statistics and activity. You ll manage your business more effectively when you stay connected with our innovative new McGann Business Alerts. It s the wireless way for mobile users to get mission-critical parking information from any location quickly and easily. Complete parking facility information is now available any time anywhere. And it s accessed from your mobile phone or wireless Palm handheld. i-client provides the tools to manage your complete parking facilities with mobility in mind. Accessing real-time information improves operational efficiency. and leads to better decisions. Look up contract parker information. View real-time revenue performance. Monitor lane equipment. View cardholder history. Run mixed-use reports and more. It s all in rich graphic display format with wireless security. It s easy to manage multiple facilities simultaneously because everything you need to know is in the palm of your hand. 8

40 McGANN SOFTWARE SUITE Access Control McGann Professional Access Control designed to meet the unique requirements of parking facility access with a depth of features and options you just won t find anywhere else. We ve simplified programming, enhanced the parker database and increased flexibility to make the system even more powerful. A new tree format makes it easy for authorized users to change reader parameters; or add, delete, and edit time/day schedules for cardholders with unique access requirements. You have immediate access to everything you need. Just click on an access group and select list cards to view all cardholders in the group quickly, easily and with no need for multiple searches. An enhanced quick search displays parker profile information by card number, name, access group, account, vehicle, status and more. It s an easy way to get a quick snapshot of any cardholder s information. Want the big picture? Just select Parker DB and link immediately to a full parker profile. The parker database now provides access to even more information. Parker profile records have been expanded to display the last 20 transactions enabling users to view parker information along with recent access/egress activity. The database includes a global programming feature and supports multiple addresses that are easily linked to our integrated Accounts Receivable module. And it includes facility selection for linking records. The parker database also features programmable contract rate by account for all cards with a secure pull-down rate selection. An easy to read options window simplifies system configuration, and set-up. Simply pull-down and select Antipassback, Nesting, Messaging Time, Auto-Sync, Automatic Lock/Unlock and more. McGann pioneered advanced access control for parking. Now McGann Professional provides an access control solution with even more control, flexibility, and ease of use. Integrated Accounts Receivable From the innovator in integrated Accounts Receivable solutions. McGann Professional Integrated Accounts Receivable is now even better. Key features and capabilities include: Automatic card activation based on payment or programmed dates. Posting payments and charges. Invoicing. Custom reporting criteria. Exporting data. Full-featured account management. Ageing accounts, user changes, and cash income management. Credit card on-file payment option The payments and charges screens are consolidated to improve and simplify postings so there s no need to toggle between a series of windows, and redundant postings are eliminated. McGann Professional lets you set late fees by account, by a dollar amount, and/or a percentage of outstanding charges. You have easy access to Accounts Receivable User Reports. You can also set the date for Auto Features by facility. Cash Income Items are preprogrammed to simplify transactions. Reversed Cash Income transactions are stored in a database for improved audit management. Full audit trail allows for transaction reversible. Plus you can filter and sort data in selected windows. Common access table improves database integrity for invoicing. Rent Exceptions, Late Fee Exceptions, Tax ID, and Facility ID are now all standard fields in the parker database. Debit Auto Recharge payments are recorded in Accounts Receivable. It s all designed to save time, labor, and the redundant posting that multiple systems require. The new McGann Professional is everything you could ask for in fully integrated accounts receivable for parking. There s nothing else like it. 9

41 McGANN SOFTWARE SUITE Debit/Value Card Access Protect parking revenues and enhance customer satisfaction with McGann Professional Debit Card Access a secure and convenient alternative to traditional cash transactions. Debit card patrons enter and exit at unattended lanes no ticket or cash required. The system automatically calculates parking fees and debits cardholder accounts based upon sophisticated variable rates or flat fees. And programmable access schedules let you decide hours and days of operation. Built-in flexibility lets you setup accounts that debit by time, use, or value and select options to program in/out privileges, and frequency of charge (once per day or once per 24-hour period). It even supports fleet management by linking multiple accounts together while drawing off a single debit account. Add value to your parking operation and build customer loyalty with McGann Debit Solutions. Messaging options work with McGann display readers to show parking fee and remaining account balance upon patron exit. Card Reader Display Debit message Payment-due Personal message Instructions Valid access with name from database Shared Accounts/Car Pool Lease Rate Management Here s an innovative way to manage valuable space in your parking facility. Issue access cards to a group of contract parkers and set an occupancy limit. When the group reaches their limit, all other cards in the group are automatically locked out. When occupancy drops below the threshold the system lets additional cardholders in again. The system supports carpools, individuals with multiple cards, or group accounts with specific occupancy limits. Generate even more revenue using our advanced Shared Accounts Plus. It automatically calculates a fee for exceeding programmable occupancy limits, and charges it to the account. You can apply different rate structures to each group account and set multiple thresholds. Use Shared Accounts to manage lease contracts, carpools, and other multi-card accounts. With either module, it s a new profit center made easy with no required monitoring. It s an exciting new way to integrate and secure parking rates. Lease Rate Management provides total convenience in setting up complex lease contracts. Rate increases can t be forgotten or late because they re preprogrammed. The system automatically adjusts rates based on renewal date and rate increase dates to match lease agreements. Alerts to send rate increase letters to cardholders are predetermined. And you can program or override a cardholder rate priority wait list. Monthly changes are coded and secured in a history report and user changes window. The system can even store and launch a read only copy of the original lease agreement reference document for discrepancy review. The software records and manages spaces and contract rates by accounts and/or tenants. You can program each account with multiple tiers, rates, and schedule changes. Account management includes rates, card numbers, date assigned, last name, and history record. 10

42 McGANN SOFTWARE SUITE Credit Card Parking McGann is leading the way with proven credit card innovations that are widely used and highly reliable. Our solutions and applications interface with most clearinghouses. And we have the technology to offer a variety of systems for your specific needs. Expressparc is an ideal way to create cashier-less express lanes. It reads the entrance ticket, calculates the fee, reads the credit card and processes payment. Then it provides a receipt for your patron and vends the gate. Credit Card In/Out is another popular solution. It records the patron s credit card at the entrance and matches it at the exit. McGann Professional automatically calculates the fee based on customer-programmable rates and charges the credit card. An optional printer prints a receipt. Many operations prefer a Credit Card On-File system. Contract parkers can choose to pay monthly charges automatically. It s an ideal way to reduce labor and handling of cash and checks with no-hassle payment posting. With McGann Accounts Receivable, cardholder payments are automatically posted and paid-thru dates are advanced. You can also use Credit Card On-File for Pay-By-Use. Entrance/exit throughput speeds up thanks to the convenience of Proximity or AVI Technology. The system calculates the fee and charges the credit card on-file. It reduces exit cashier labor and offers a way to charge variable rates while building patron loyalty. Credit Card Replenishment offers many advantages, and one of the greatest is that you receive cardholder payments in advance. Your patrons deposit a specified amount into a prepaid debit account. For example, they can deposit $200 with a programmable low limit of $25. When the low limit is reached, the system automatically replenishes the account with a credit card transaction. It s an efficient system that reduces the need for cashiers, staffing payment windows or manual postings. Credit card solutions provide alternative customer payment methods with customer service in mind. Auto Activation Event Scheduler Expand your Access Control options with McGann Auto-Activation Module. It lets you sell temporary one-day or multiple-day cards that activate on the first use, then automatically lockout on the expiration date. Program the system for the number of cards to auto-activate; and select the number of days. The system automatically manages the operation. The parker database displays real-time activation and expiration dates for ease of managing. Auto-Activation is ideal for hospital visitors, hotel guests, universities and special events. Cards can be programmed in advance and pre-sold to departments, merchants, property managers, and hotels without cumbersome activation or expiration concerns. It accommodates various reader technologies such as proximity, magnetic stripe, bar code and more. Look to McGann to provide a flexible easy-to-use solution for limited use card activation and deactivation. Control made easy! Stadiums, theaters, convention centers, and other venues, can automate Access Control with the McGann Event Scheduler. Event passes, access cards, or tickets are automatically activated for use based on specific dates and times in your preprogrammed event schedules. The parking manager creates an event access group then adds the dates and access times for a single event or an entire season. Season ticket holders are assigned to the event access group and are automatically activated and deactivated without worry. When Event Scheduler is combined with the Limited Use feature, event cards and passes can be set to expire after a single use or a number of uses. The system supports a variety of reader technologies including barcode, magnetic stripe, proximity, and AVI. Let the McGann Event Scheduler manage parking at your next big event. 11

43 McGANN SOFTWARE SUITE Revenue Management Maintain tight revenue control and increase your audit capability with McGann Professional Revenue Management. It lets you view transactions, program revenue devices, monitor alarms, and track tickets. And it interfaces with both new or existing parking devices. The real-time transaction window displays transaction details for fee computers, pay stations, ticket dispensers and other revenue control devices. And you can select color schemes to differentiate transactions from normal to backouts and more. Remote programming capability is built-in for setting up rates, validations, and other parameters. Simply select a specific device to program, or all devices. You can program devices in real time, or download them later by saving the programs to a file. Advanced device alarm monitoring lets management select and view multiple levels of alarms. Alarms may be setup to alert management with on-screen flashing text or audible notification. And they can be acknowledged and cleared, or remain on-screen for later response. With advanced ticket tracking, you have real time access to outstanding and unreconciled ticket reports. For more comprehensive ticket audits, use filters and sort parameters to search and review ticket transactions by lot, machine number, ticket number, entry date, exit date or status. It s the revenue software that improves all aspects of your operation. From audit control and data integrity to centralized reporting and stolen ticket control, maximize your revenue potential with McGann Professional. Count and Monitoring McGann is the leader in count management solutions. We ve enhanced our proven solutions, which accurately display and monitor space management statistics. It interfaces with nearly any new or existing lane equipment. The system displays both differential counts and non-resettable transaction counts. It monitors and stores real-time activity, provides remote control of devices and displays alarm messages. You can configure the system to include customer-specific devices. The new McGann Professional can be installed seamlessly to your existing system. Applications range from parking garages and surface lots, to arenas and complex airport systems. The software can support a single facility or multiple centrally managed locations. All lane information is presented on a single screen for easier, more efficient access to counts, monitors, and controls. It shows occupancy percentages and is resettable by time of day. Multiple programmable occupancy level alerts are standard, producing action alarms to improve facility management efficiency. A Client/Server configuration is available for larger system needs. But whatever the size, McGann Client workstations can control and view every aspect of the system. The macro set-up is streamlined and more flexible for programming of specific dates for event control. Interactive Facility Mapping provides an overhead view of your facility and gives you single-point control over it. You see all activity as it happens. You can control devices just by clicking on the image. Count and monitoring with VMS Module allows count statistics to activate fixed message signs, digital variable signs and facility or level sign towers. Messages and available space counts can provide instructions and way-finding to patrons. The software improves space utilization, reports traffic conditions, and communicates special messages. For count statistic accuracy, easy audit control and much more, you can count on McGann Professional. 12

44 McGANN SOFTWARE SUITE Valet Tracking Systems Give your parking patrons first-rate valet service and optimize Revenue Control with McGann Professional Valet cashiering terminal. The system provides automated cashiering, fee calculation, ticket tracking, revenue reporting, and optional valet monitoring. Economical barcode technology enables fast ticket processing minimizing entry queues. And the compact touch-screen workstation with programmable default rates, flat fees, and validation codes ensures efficient and accurate transaction processing. The system even provides a vehicle profile screen to document preexisting damage, color, make, and license number. And integration with McGann Professional Revenue software provides comprehensive revenue and attendant shift reporting. Add McGann Valet tracking software for automatic tracking of valet attendants handling vehicles on entry and exit. It pairs the valet s access ID card with the valet ticket number and displays it in the McGann Professional Card activity screen for management review. Use it for historical reporting on damaged vehicles and the employees who handled them. Streamline and secure your valet operation with McGann Professional valet cashiering systems. Variable Message Sign (VMS) Maximize your parking system investment with VMS integration and way-finding solutions. The system provides real-time count status and helpful instructions to patrons. VMS software improves space utilization, reports traffic conditions, recommends routes, presents alternative parking for special events and communicates general instructions and messages. Program the software to output real-time messages and available space counts by level or facility. Change signs quickly based upon facility needs. Gain better control and eliminate the need for multiple fixed message signs. Whether you need single-facility or campus-wide control, McGann has your solution. 13

45 McGANN SOFTWARE SUITE Hotel Guest Systems Maximize guest convenience and increase revenue with McGann Hotel Systems. Whether you use our standard hotel front desk workstation or integrate with a property management hotel system, McGann has the ideal solution. McGann hotel solutions integrate with your parking management system to provide seamless automation. Track postings and user changes. Control write-offs and charge backs. And offer unparalleled convenience by enabling guests to use their room card for unattended access and egress. Built-in flexibility enables extended stay, early checkout, valet/self-park rates and room change control. With options that include valet integration, event passes, banquet and meeting guest passes, and complete revenue reporting... McGann has the solution to fit your application. We offer experience and proven solutions with a marquee line-up of hotel clients that include Marriott, Hyatt, Hilton, Embassy Suites, Doubletree, Holiday Inn, Courtyard, Renaissance, Sheraton, Westin, Four Seasons, Ritz Carlton, and many independent hotels. Check-in with McGann Professional for integrated hotel parking solutions. Event Parking Systems Pay-at-Entry Parking Made Easy! These innovative McGann systems set the standard for managing pay-at-entry parking operations that are fast and efficient. Designed for speed of processing and ease of use, McGann moves patrons in and out quickly while accurately tracking revenue, providing historical statistics, and reporting. McGann offers several solutions including: Real-time Wireless Handheld Event Terminal with Event Management Software application makes processing a breeze. It supports cash, credit card, discount tickets, same-day entry and pre-sold event passes (for VIPs, vendors, exhibit attendees). Active Hot Buttons AHB allows customer specific look-ups, bulletins, cashier instructions, future events, disabled parking, and VIP arranged parking. mexpress Unattended Credit Card Pay-at-Entry. It speeds event entries with unattended credit card payment, pre-sold event passes and reservation processing. Internet Event Reservation System. Pre-selling event parking minimizes lane cash handling and queuing while providing fast access and egress. All McGann Event solutions offer superior customer service and Revenue Control. Let McGann facilitate your reservation and presale needs! 14

46 McGANN SERVICE OPTIONS McGann is dedicated to developing innovative services to improve your parking operations. Quite often parking systems are purchased and not used or managed to capacity. We have a dedicated support team focused on providing new ways to ensure that your McGann Professional system is being used efficiently and for its intended function. McGann Data Services, reoccurring training, and Preferred Customer Software Support Agreements can help ensure you get the most out of your investment. Data Services is the Watchful Eye McGann Data Services provides the watchful eye over your parking management system investment. Our goal is not to replace the auditor but instead to use our expertise to provide sophisticated off-site monitoring of operations ensuring maximum beneficial use of the McGann Professional software and system. By randomly sampling data from the parking facility, we will check and crosscheck data and system parameters to help identify problems with connectivity of equipment, system use, and revenue management. If we find exceptional situations or inefficiencies, we will present our recommendations in a concise report so that management can follow up with improved policy, staffing or reporting. We will continue to follow-up on issues we ve identified to help ensure that any changes in operation have provided the desired results. We can tailor the service to meet the needs of your facility by offering recommendations to lower-tier management and staff with complete reports reserved for ownership personnel and upper management. This way, everyone can work with McGann Professional to achieve the best, most efficient parking facility possible. Innovative Training Tools McGann provides various innovative training options to ensure proper use of your McGann Professional software. We build in Context-Sensitive Help for the do-it-yourselfer, as well as offering classroom training, on-site instruction and even web training for that almost like being there experience. Our experts can even develop a customized Standard Operating Procedure (SOP) document styled specifically for the unique needs of your facility. A common challenge faced by parking facilities everywhere is the high turnover rate of entry-level personnel. Let McGann help you to keep your staff s competency at a level to maximize your investment. You may choose to schedule training on a recurrent basis or just call us as-needed we ll be ready to bring your new hires up to speed, to refresh your retained staff and to answer any questions that may have occurred since we ve last paid a visit. Preferred Customer Software Support Agreement The McGann Preferred Customer Software Support Agreement is the best way to protect and benefit from your software investment. We are continually adding new enhancements and features to our software and this plan includes all applicable updates and upgrades to ensure that you will always have the most dependable and full-featured system. Our technical support experts have years of field-service experience in parking and are ready to help you with everything from simple operational how-to questions to complex mission-critical system troubleshooting. The plan will also help keep your staff informed of new enhancements through our real-time interactive Web conferencing demonstration sessions. The Preferred Customer plan is a great way to protect your software investment. 15

47 mcgann software systems 651 taft street ne // minneapolis mn // tel // fax // All specifications and characteristics are subject to changes without notice. Copyright 2004 McGann Software Systems. All rights reserved.

48 APPENDIX C iparc Brochure

49 FULLY INTEGRATED MANAGEMENT OF PARKING REVENUE & ACCESS Total Revenue and Access Control On Site or Off Site iparc is the next generation of revenue and access control for the parking industry. It combines Amano's global software development and industry-leading parking equipment expertise for a totally integrated system solution. Fully scalable, robust, cost-effective and easy-to-use, iparc gives you complete control from a single lot up to multiple facilities around the nation, whether you are on site, at a central office, or traveling the world. No matter where you are, you gain real-time 3-D mapping of transactions and system activity, along with a full suite of pre-configured reports that put mission-critical data at your fingertips. The Most Advanced, Fully Integrated Technology Designed for optimum performance of Amano parking equipment, all of iparc s system interaction is performed using any standard Internet Explorer web browser without the need to license and install dedicated workstations.* The highly advanced iparc system was designed from the ground up to take advantage of Microsoft s state-of-the-art.net technology, instead of trying to adapt old technology to provide piecemeal web-support. iparc uses industry standard TCP/IP communications to allow simple solutions that take advantage of a full range of off-the-shelf local area, wide area, and wireless network connectivity solutions. This certification recognizes solutions that fully support XML Web service capabilities, and takes advantage of.net programming model benefits such as multi-language support, added security, and enhanced flexibility benefits that customers will also realize. Comprehensive Customizable Reporting iparc provides a full repertoire of ready-to-run reports that can be viewed from any Internet Explorer web browser. Each can be easily tailored on-the-fly by selecting a time and date range (Today, Yesterday, This Week, Last Week, Last Month, Month-to-Date, Year-to-Date, Custom) and other criteria to narrow down your report to just the information you want to see. All report settings can be saved to run the tailored report at a later time with a single click. Reports can be: Viewed on screen, printed, saved to file locations, converted to PDF, Word, Excel files, or ed to recipients. Scheduled to automatically run at regular times: specific day(s) each week, specific day(s) each month, specific day(s) each quarter or year. Enhanced with charts and other graphics using iparc 's Crystal Reports plug-in. Full Accounts Receivable Support With the optional iparc Accounts Receivable plug-in, you define how and when accounts are billed (pre-pay, post-pay, per-usage, flat rate, variable rate, auto-charge credit card on file, auto-invoice, monthly, quarterly, etc.). iparc Accounts Receivable allows you to: Automatically disable contract cards for delinquent accounts according to user-specified rules (Aging Category, Amount of Balance, Number of Notices). Link discount coupons to accounts to charge back discounts to the issuer. Automate invoicing, credit card auto-replenish, and late notices based on schedules you define. Send automatic notification when credit cards are charged. Link all transactions and charges to General Ledger accounts. Single-Source Security and Alarm Monitoring for Lots and Buildings Real-Time Transaction and Count Monitoring Simplified Management of Contract Customers iparc includes sophisticated access control features only found in true security applications. The iparc solution gathers all transactions from parking devices and access control points in real-time. As messages are received, iparc stores them in a Microsoft SQL Server database and simultaneously displays them on 3-D site maps in your browser. Any exception message from a device can be designated as an Alarm for highlighted display, as well as being ed to the appropriate responder's computer or text-messaging device. Lot counts, differentials, and statistics are readily available on screen at all times. iparc allows your contract cardholder database to be managed from your browser. All contract cardholders can be grouped by account with up to three access cards assigned to each cardholder. Cardholder profiles allow you to precisely configure access rights once and then simply assign the appropriate profile to each cardholder. User-defined fields can easily be added to the cardholder database to customize it for your needs. Batch operations allow you to apply changes to large groups of cardholders in one operation. Powerful and easy-to-use search features are provided to quickly find a particular cardholder or to find a set of cardholders to apply These allow you to control access to parking facilities and buildings with a single system (e.g., supervised input monitoring, input shunting, anti-passback, user-defined alarms, local door-held-open alarm, elevator control, input-output linking, multiple door shunt durations). Distributed intelligence provides superior response time when a card is presented. Access decisions are made locally at the controller so access is not interrupted should the server be unreachable. iparc Access Modules support all card readers and keypads that use a wiegand or clock/data output format (including proximity, wiegand, batch operations to. magnetic stripe, and biometric), as well * Up to 3 simultaneous connections.licensing for additional connections available. Microsoft and the.net Logos are registered trademarks of Microsoft Corporation in the United States and/or other countries. iparc is a registered trademark of ASE, USA Inc. PDF is a registered trademark of Adobe Systems Incorporated Microsoft Excel and Microsoft Word are registered trademarks of Microsoft Corporation as any card data format (including site and facility codes and issue levels).

50 Host The System Remotely From Central Headquarters Features Fully scalable from a small single lot facility to a national, multi-facility centralized system. Headquarters LAN Internet Explorer iparc Web Server Remote Office Internet Explorer Designed for total integration with Amano parking equipment. Internet / WAN / VPN LAN All system interaction can be operated on a standard Internet Explorer web browser, without the need of licensing and installation of dedicated workstations. Real-time 3-D mapping display of transactions and system activity. Amano Parking Equipment Lot A icontroller Amano Parking Equipment icontroller Lot Z Wireless Tablet PC Corporate Headquarters 140 Harrison Avenue, Roseland, NJ (973) Other companies of the Amano Group Full suite of pre-configured reports provides mission-critical data at your fingertips. Designed from the ground up to take advantage of Microsoft s state-of-the-art.net technology. Industry standard TCP/IP communication allows simple solutions that take advantage of a full range of off-the-shelf local area, wide area, and wireless network connectivity solutions. Three connections are included standard. Connect Remotely Using Internet Explorer Internet Exporer Internet / WAN / VPN LAN iparc Server Internet Explorer ASE USA, Inc. ASE R&D Europe N.V. ASE (Shanghai) Co., Ltd. Amano Corporation Amano Electronics Europe, N.V. (A.E.E.) Amano Business Credit Amano Cincinnati Canada, Inc. Amano USA, Inc. (A.U.I.) Time & Parking Systems, Inc. Pioneer/Eclipse Corporation Amano Pioneer Credit Corporation (A.P.C.C.) Accutime Corporation Amano Cleantech Malaysia Sdn. Bhd. (A.C.M.) Amano Time & Air Singapore Pte. Ltd. PT. Amano Indonesia Amano Korea Corporation Amano International Trading (Shanghai) Co., Ltd. Fully Integrated Management of Parking Revenue & Access Anywhere, Anytime, Any Size Wireless Tablet PC Amano Parking Equipment 2004 Amano Cincinnati, Inc. All rights reserved. LP-IPARC 12/04 2M

51 APPENDIX D Photos

52 Figure 1 - Rankin Avenue Garage Figure 2 - Rankin Avenue Exit Figure 3 - Rankin Avenue Garage Monthly Exit Figure 4 - Rankin Avenue Garage Entry Figure 5 - Rankin Avenue Garage Entry Figure 6 - Civic Center Garage

53 Figure 7 - Civic Center Garage Exit Figure 8 - Civic Center Garage Entry Figure 9 - Civic Center Garage Monthly Entry/Exit Figure 10 - Wall Street Garage Exit

54 Figure 11 - Wall Street Garage Entry Figure 12 - Ashville Iron