Ecommerce Website Security

Ecommerce Risks & Threats

According to Trustwave
research, 90% of data
breaches impacted
small merchants
1. Retail - 45%
2. Food & Beverage - 24%
3. Hospitality - 9%
Top 3 Compromised Industries
Data Breaches

Average cost of a data
breach for small business
$36K+

Merchants need to
consider a multi-layered
approach for protecting
sensitive customer data.
Serious data breaches can
happen even you do not
store cardholder data.

Data BreachCost Factors
Mandatory Forensic
Examination
Notification of Customers Affected Customer Credit
Monitoring
PCI Compliance Fines
Liability for Fraud Charges Credit Card Replacement
Costs
POS System Improvements Reassessment for PCI
Compliance

Non-monetarydamages are painfultoo
57%
31%
75%
of people lost trust and
confidence in the
organization
of people terminated
their relationship with
the organization
of executives said the
data breach had an
impact on the business’
reputation
Ponemon Institute Study Ponemon Institute Study Ponemon Institute Study

Non-monetarydamages are painfultoo
Bad Press Loss of Payment
Card Privileges
Your Time

What is PCI Compliance?

PCI Compliance
In 2006, American Express, Discover, JCB International, MasterCard and Visa Inc.
founded the Security Standards Council (PCI SSC) in order to maintain a
comprehensive and evolving set of standards to help vendors protect their
payment systems.
PCI = Payment Card Industry

BuildandMaintaina SecureNetwork
•
•

Protect Cardholder Data
•
•

Maintaina VulnerabilityManagement Program
•
•

Implement Strong Access Control Measures
•
•
•

RegularlyTest andMonitor Networks
•
•

Maintainan InfoSecPolicy
•

Website Security

How Websites Get Hacked
•
•
•
•
•
•
•
•

SSL Certificate= Secure?
•
•
•
•
•

Website ApplicationFirewalls
•
•
•
•
•
•

Post Breach PCI Protocol

Mandatory Forensic Examination
• PCI DSS require merchants that are
suspected of having a data breach to have
a mandatory forensic examination.
• According to Verizon Business, a small
business examination may cost between
$20,000 to $50,000.

Notificationof Customers
• If financial information is suspected of
being compromised, most states require
that customers be notified.
• University of North Carolina at Chapel Hill
said a 2013 data breach of just 6,000
records has cost the school nearly $80,000
in working with affected parties.

Affected Customer Credit Monitoring
• If you experience a breach you may
be required to produce up to a
year’s worth of credit monitoring
and/or counseling services to
customers affected by your breach.

PCI ComplianceFines
• In 2011, 96% of the merchants experiencing a
data breach had not complied with the PCI
DSS.
• If the forensic investigation shows that your
business was not in compliance heavy fines
could be levied against you. These fines can
range from $5,000 to $50,000 or more.

Liability for Fraud Charges
• Many merchants assume they have no
liability after a data breach.
• This is not necessarily the case; lawsuits
may claim liability on merchants for security
breaches.

Credit Card ReplacementCosts
• Merchants may be required by card issuers to
pay the cost of reissuing cards to customers.
• These fees can range from $3 to $10 per card.

POS System Improvements
• Depending on the source of the breach, you
may have to invest in upgrading or replacing
your POS system, including servers, software
and/or card swipe devices.

Reassessment for PCI
Compliance
• In order to qualify to accept cards again,
a complete PCI assessment by an
external Qualified Security Assessor
(QSA) must be performed.

Thank You!
Alycia Mitchell

Ecommerce Website Security

More Related Content

What's hot (20)

Similar to Ecommerce Website Security (20)

More from Sucuri (20)

Recently uploaded (20)

Ecommerce Website Security