Seal Discrepancy at Card Stock Receiving
A card production facility receives a scheduled delivery of 24,000 preprinted magnetic-stripe card bodies from a transport courier. The manifest lists three sealed totes with seal numbers 77120, 77121, and 77122. At the receiving dock, the clerk finds tote 2 intact but bearing seal 77119; the courier says the original seal was damaged at the hub and replaced under 'standard practice' without a written exception. Tote weight matches the manifest to within 0.2 kg. The receiving clerk wants to sign for the shipment as 'received with seal exception' so production is not delayed; the cards are needed for an issuer's Monday run. The dock camera recorded the trailer but not the tote handoff. Company procedure says seal discrepancies must be reported to security before acceptance, but the supervisor is in a meeting.
1. What should the receiving clerk do immediately when the seal number does not match the manifest, and why is signing 'received with seal exception' risky?
Read the worked answer
The clerk should stop the normal receipt. Move the tote to a locked quarantine area without opening it, preserve the seal and packaging, photograph the tote and seal, record the courier's identity, vehicle, time, and the exact seal number observed, and notify security and the supervisor before signing anything. A signature-even with an exception note-can be treated as acknowledgment of receipt and can weaken the facility's position if tampering or shortage is later found. It also starts the clock on chain-of-custody ambiguity: once the tote is in normal production stock, no one can prove whether the discrepancy occurred at the hub, in transit, or inside the facility. The courier's explanation ('standard practice') is not sufficient because there is no written exception or replacement-seal record. The safe sequence is quarantine, document, notify, then reconcile count and serials before acceptance.
2. What investigation and reconciliation steps should occur before any cards from the discrepant tote are released to production?
Read the worked answer
First, verify the tote contents against the manifest-count, part number, and any serial or batch ranges-under two-person observation. Inspect the packaging for cuts, re-gluing, or other tampering, and compare the observed seal to the courier's replacement-seal log. Request the hub's seal-replacement record and any CCTV or handoff records; if they are unavailable, treat the tote as suspect. Review dock camera footage for the handoff, although the setup says it did not capture the tote itself. Interview the receiving clerk and courier separately and document statements. If counts or serials are short, or tampering is evident, reject the entire tote and notify the issuer and courier security. Only after reconciliation and written security release should the stock enter production; if there is any unresolved discrepancy, do not use the cards.
3. The production manager says blank card bodies contain no cardholder data, so the seal discrepancy is low risk. Evaluate this reasoning.
Read the worked answer
The premise is true but the conclusion is too narrow. Blank card bodies do not contain PANs, but they are controlled production stock that can be personalized into counterfeit cards if they leave custody. A seal mismatch is a custody signal: it means the chain from the supplier to the bureau is not proven. The relevant risks are substitution, short shipment, and later repackaging-not cardholder data exposure alone. The facility should still apply receipt controls, inventory reconciliation, and quarantine because the cards are inputs to a trusted personalization process. I would rate the data-breach risk lower than for personalized cards, but the fraud and inventory risk is not negligible. The manager's argument can justify a proportionate investigation, not skipping it.