APPENDIX 1 MDOT MTA Electronic Fare Collection Scope of Work AGY-21-008-IT APPENDIX 1 Acronyms & Glossary 2FA– Two-Factor Authentication ABP – Account-Based Processor ABT– Account Based Ticketing ACH – Automated Clearing House ADA – Americans with Disabilities Act AES –Advanced Encryption Standard ADAAG – ADA Accessibility Guidelines AFC – Automated Fare Collection AJAX – Asynchronous JavaScript and XML AMPS – Account Management and Processing System ANSI – American National Standards Institute APC – Automated Passenger Counter API – Application Programming Interface AR – Accounts Receivable ASCII–American Standard Code for Information Interchange ATC–Air Traffic Control ATP – Account-Based Transaction Processor AUT–Application Under Test AVS – Address Verification System BCPU –Bank Card Processing Unit BHU— Bill Handling Unit BO Ops—Back-Office Operations BOD – Bus Operator Display CAC – Common Access Card CAD/AVL – Computer-aided Dispatch/Automatic Vehicle Location system CAT6 –Category 6 Cable CCTV – Closed-Circuit Television CDA – Combined Data Authentication CDMA – Code Division Multiple Access CDR – Conceptual Design Review CDRL – Contract Data Requirements List CEC – California Energy Commission CHU – Coin Handling Unit CIPURSE – An open security standard for transit fare collection systems CMS – Content Management System COTS – Commercial-off-the-Shelf equipment CPOS – Compact Point of Sale CRM – Customer Relationship Management system CSC – Card Security Code CST – Customer Service sales Terminal CPU – Currency Processing Unit DBMS – Database Management System DDA – Dynamic Data Authentication DESFIRE – Data Encryption Standard Fast, Innovative, Reliable and Secure DUO – Cisco Duo Security AGY-21-008-IT APPENDIX 1 EDP – Electronic Data Processing E2E – End-to-End ECR – Engineering Change Requests EFT – Electronic Funds Transfer EMI – Electromagnetic Interference EMV – Europay, MasterCard, Visa ESN – Electronic Serial Number ETL – Extract, Transform and Load EU – Extended Use FACI – First Article Configuration Inspection FAT – Factory Acceptance Test FCC – Federal Communications Commission FDR – Final Design Review FIT – Field Integration Test FMI – Field Modification Instructions fPan – funding Payment Account Number FPV – Fare Payment Validation FRB – Failure Review Board FUT – Functional Unit Testing GFCI – Ground Fault Circuit Interrupter GL – General Ledger GSM – Global System for Mobile communications HHU – Handheld Unit HTML – Hypertext Markup Language HTTPS – Hypertext Transfer Protocol Secure I/O – Input/Output IaaS– Infrastructure as a Service IBM- International Business Machines Corporation – A technology company ICD – Interface Control Documentation IEC – International Electrotechnical Commission IIN – Issuer Identification Number INCITS – International Committee for Information Technology Standard iOS – Operating System for Apple products IRS – Internal Revenue Service IVR – Interactive Voice Response system IP – Internet Protocol ISO – International Standards Organization KPI – Key Performance Indicators LCD – Liquid Crystal Display LLRU – Lowest Level Replacement Unit LU – Limited Use MARC- Maryland Area Regional Commuter MDM – Mobile Device Management MDOT – Maryland Department of Transportation MDT – Mobile Data Terminal MED – Media Encoder/Dispenser MIFARE – A NXP owned series of chips used in contactless smart cards MIL – Master Issues List AGY-21-008-IT APPENDIX 1 MIL-STD – U.S. Military Standard MIMS – Media Inventory Management System MS – Microsoft MTA –Maryland Transit Administration MTT – Mass Transit Transaction MVP – Minimum Viable Product NEC – National Electric Code NFC – Near Field Communication NFPA – National Fire Protection Association NTP – Notice to Proceed NVM – Non-Volatile Memory ODA – Offline Data Authentication ODBC ‐‐ Open Database Connectivity OEM – Original Equipment Manufacturer P2PE – Point-to-Point Encryption PA – Payment Account PA-DSS – Payment Application Data Security Standard PAN – Primary Account Number PAR – Payment Account Reference PAT – Production Acceptance Test PCI-DSS – Payment Card Industry – Data Security Standard PDR – Preliminary Design Review PDU – Protocol Data Unit PII – Personally Identifiable Information PIV – Personal Identity Verification POS – Point of Sale system PM – Preventative Maintenance PM – Project Manager PMP – Project Management Professional QA – Quality Assurance QC – Quality Control QR – Quick Response QSA – Qualified Security Assessor RAM – Random Access Memory RFI – Radio Frequency Interference RMS – Revenue Management System SAE – Society of Automotive Engineers SAM – Secure Access Module SAP - System Analysis and Program Development – A software company SAT – System Acceptance Test SBC – Single Board Computer SAV – Stand-alone Validator SCADA – Supervisory Control and Data Acquisition SED – Smartcard Encoder/Dispenser SI – System Integrator SIT – System Integration Test SKU – Stock Keeping Unit SMA – System Monitoring Appliance AGY-21-008-IT APPENDIX 1 SMA – Software Maintenance Agreement Smart MX – Brand of secure smart card controller platforms owned by NXP SMMA – System Monitoring and Management Application SNMP3 – Simple Network Management Protocol version 3 SoGR – State of Good Repair SQL – Structured Query Language SSD – Solid State Drive SSL – Secure Socket Layer sTVM – simple Ticket Vending Machine TDEA – Triple Data Encryption Algorithm TLS – Transport Layer Security TTY -- Teletypewriter TVM – Ticket Vending Machine UI – User Interface UID – Unique Identification Number UL – Underwriter Laboratories UPS – Uninterruptible Power Supply USB – Universal Serial Bus UX – User Experience VDC – Voltage Direct Current VPN – Virtual Private Network WMATA – Washington Metropolitan Area Transit Authority XGA – Extended Graphics Array AGY-21-008-IT APPENDIX 1 Table of Contents 1. Introduction .......................................................................................................................................... 1 1.1 Project Stakeholders ..................................................................................................................... 1 1.2 Project Timeline ............................................................................................................................ 2 1.2.1 Phased Delivery Approach ....................................................................................................... 2 1.2.2 Transition Approach ................................................................................................................ 6 1.2.3 Operations Approach ............................................................................................................... 7 1.3 Technical Specification Format ..................................................................................................... 8 2. Future System Overview ....................................................................................................................... 9 3. Project Management Requirements ................................................................................................... 11 3.1 Project Manager and Lead Engineer ........................................................................................... 11 3.2 Project Meetings ......................................................................................................................... 12 3.2.1 Project Kickoff Meeting ......................................................................................................... 12 3.2.2 Progress Review Meetings ..................................................................................................... 12 3.2.3 Weekly Project Coordination Meetings ................................................................................. 14 3.3 Project Management Plan .......................................................................................................... 14 3.3.1 General Requirements ........................................................................................................... 14 3.3.2 Master Program Schedule ..................................................................................................... 15 3.3.3 Scope Management ............................................................................................................... 16 3.3.4 Cost Management ................................................................................................................. 16 3.3.5 Risk Management .................................................................................................................. 17 3.3.6 Transition and Change Management .................................................................................... 17 3.3.7 Safety Assurance .................................................................................................................... 18 3.3.8 Quality Assurance and Control .............................................................................................. 18 3.3.9 Subcontractor Management.................................................................................................. 20 3.3.10 Communications Management and Document Control ....................................................... 21 3.3.11 Master Issues List ................................................................................................................... 21 3.4 Change Control ..........................................................................................................................