Smart Payment Processing ™ Protecting Your Business from Card Data Theft Presenter: Lucas Zaichkowsky
Smart Payment Processing ™ Why should I care? The consequences of a card data security breach can be catastrophic to your business, resulting in: Lost customers Damaged reputation Hefty fines Costly audits Litigation
Smart Payment Processing ™ What is PCI compliance? PCI compliance is required for merchants and service providers that deal with cardholder data.
Smart Payment Processing ™ Who requires PCI compliance? Manufacturers PCI PED PIN Entry Devices Software Development PCI PA-DSS Payment Application Vendor Merchants & Processors PCI-DSS Data Security Standards Payment Card Industry Security Standards Protection of Cardholder Payment Data PCI Security Standards and Compliance
Smart Payment Processing ™ What is PCI Validation? Annual SAQ recommended Quarterly network scan by ASV, if applicable Compliance validation requirements set by acquirer
Smart Payment Processing ™ The top reason to validate PCI compliance Visa Mandate: By July 1st, 2010, all merchants must use only PA-DSS or PABP-compliant applications
Smart Payment Processing ™ Three steps toward PCI compliance 1.Upgrade to a PABP or PA-DSS compliant version of your POS software 2.Ensure your system is securely configured 3.Join Mercury’s PCI Partner Program
Smart Payment Processing ™ Do you have a security checklist? Know the SAQ and make sure you understand what you need to do.
Smart Payment Processing ™ Common Problems and Solutions Problem: Non-PCI compliant remote access Solution: LogMeIn Central with their two factor authentication Problem: Outdated software Solution: Most current version of your POS software Problem: PCI compliance Solution: Mercury’s PCI Partner Program
Smart Payment Processing ™ Mercury’s PCI Partner Program Discounted security assessor services Online annual merchant SAQs and network scans Automated reporting and results Breach reimbursement for qualified merchants
Smart Payment Processing ™ What questions do you have?