1. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Protecting Your Business from Card Data Theft Presenter: Lucas Zaichkowsky

2. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Why should I care? The consequences of a card data security breach can be catastrophic to your business, resulting in:  Lost customers  Damaged reputation  Hefty fines  Costly audits  Litigation

3. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com What is PCI compliance? PCI compliance is required for merchants and service providers that deal with cardholder data.

4. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Who requires PCI compliance? Manufacturers PCI PED PIN Entry Devices Software Development PCI PA-DSS Payment Application Vendor Merchants & Processors PCI-DSS Data Security Standards Payment Card Industry Security Standards Protection of Cardholder Payment Data PCI Security Standards and Compliance

5. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com What is PCI Validation?  Annual SAQ recommended  Quarterly network scan by ASV, if applicable  Compliance validation requirements set by acquirer

6. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com The top reason to validate PCI compliance Visa Mandate: By July 1st, 2010, all merchants must use only PA-DSS or PABP-compliant applications

7. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Three steps toward PCI compliance 1.Upgrade to a PABP or PA-DSS compliant version of your POS software 2.Ensure your system is securely configured 3.Join Mercury’s PCI Partner Program

8. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Do you have a security checklist? Know the SAQ and make sure you understand what you need to do.

9. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Common Problems and Solutions Problem: Non-PCI compliant remote access Solution: LogMeIn Central with their two factor authentication Problem: Outdated software Solution: Most current version of your POS software Problem: PCI compliance Solution: Mercury’s PCI Partner Program

10. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com Mercury’s PCI Partner Program  Discounted security assessor services  Online annual merchant SAQs and network scans  Automated reporting and results  Breach reimbursement for qualified merchants

11. Smart Payment Processing ™ 800-846-4472 www.MercuryPay.com What questions do you have?