Retailers must institute protection against cybercrime

© momius - Fotolia.com

It provides all the tools and services to protect payments and data security, including a compliance bundle for adherence with the compulsory Payment Card Industry Data Security Standards (PCI DSS), and the recently legislated Protection of Personal Information Bill (POPI).

Foregenix director, Andrew Henwood, says, "Any business that accepts payment or handles customer data in whatever guise has an obligation to ensure they are doing so in the most secure and risk-free way possible for their customers."

FSE integrates easily into the customer's existing business IT infrastructure, offers the optimal protective layered approach through its security information and event monitoring (SIEM) and file integrity management (FIM) and offers a number of connectivity options such as ADSL or MPLS / VPN (IPSEC) through partners.

The solution also includes the Foregenix Serengeti Analyser, an industry unique service for malware detection, mitigation and security validation at the Point of Sale (POS), as well as it cardholder data discovery product, FScout that identifies and confirms where sensitive cardholder data is being stored.

The system is bound together with a holistic PCI DSS compliance service that dramatically reduces the scope and extent of the PCI requirements businesses have to meet. These include portal services for PCI DSS self-validation and external ASV scanning.

It will provide tangible risk reduction through effective and holistic information security best practice.

"With recent cyber-attacks and data breaches having devastating effects in the region, businesses need a cost-effective solution to mitigate the threat, without breaking the proverbial bank. Retailers need a simple and cohesive solution; allowing them to focus on what they do best. This is that solution and has been optimised for today's real-world issues."

PCI DSS compliance a necessity

Additionally, becoming PCI DSS compliant is a necessity for all businesses taking card payments. PCI DSS is mandated by the major card schemes (e.g. VISA, MasterCard, American Express, etc) and is designed to secure the payments landscape.

If merchants do not comply, they are at risk of non-compliance fines and, if suspected of being compromised, forensic investigation costs and compromise penalties. On top of this, a merchant that has recently fallen victim to compromise is immediately escalated to merchant level one status, as per card scheme rules and will be required to comply fully with the PCI DSS, undergoing the relevant assessment processes, to reduce the immediate risk.

The solution provides a pain-free experience in facilitating compliance and reducing real-world risk, allowing merchants to focus on their core business. For more information, go to www.foregenix.com/fse.