Retail & Hospitality Services PCI Compliance: How compliant is your payment security?

transcript

Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or

distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.

Verizon 2017 Payment Security Report.Retail and Hospitality Webinar

Wednesday, September 20th

This document and any attached materials are the sole property of Verizon and are not to be used by you

other than to evaluate Verizon's service.

identifying Verizon's products and services are trademarks and service marks or registered trademarks

and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other

countries.

All other trademarks and service marks are the property of their respective owners.

Proprietary statement

Please advance to the next slide where you can watch the video. The total slide deck is available for your

reference after the video. Thank you.

distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 4

Payment Security Experts

Franklin Tallah

Sr. Manager

Payment Security Practice

Verizon Enterprise

Solutions

Mark Stachowicz

Principal Consultant

Verizon Enterprise

Solutions

Ciske Van Oosten

Senior Manager

Verizon Enterprise

Solutions

Ron Tosto

Global Sr. Manager

Verizon Enterprise

Solutions

Confidential and proprietary materials for authorized Verizon

personnel and outside agencies only. Use, disclosure or distribution

of this material is not permitted to any unauthorized persons or third

parties except by written agreement.

The 2017 Payment Security Report.

• This report provides a thorough investigation

of the challenges of securing customers’

payment data.

• It examines the state of payment security, and

looks at what needs to improve.

• Based on our PCI assessments, the report

explores compliance with PCI DSS in great

detail, and is an invaluable resource for

security and compliance professionals.

There’s good news: full compliance continued its upward progression.

But still almost half of organizations analyzed failed to maintain compliance.

Payments Acceptance Landscape

Hospitality

Retail

Compliance Statistics -Analysis & Insight

Industry Comparison

Full Compliance:

All 55.4%

Financial Services 59.1%

Retail 50.0%

Hospitality 42.9% Worst

IT Services 61.3% Best

DSS Requirement 3Protect stored cardholder data

Financial Retail Hospitality IT Services

Req 3 7.8% 21.5% 8.5% 3.9%

Req 3 92.2% 78.5% 91.5% 96.1%

100.0%

In place Control gap

DSS Requirement 4Protect data in transit

Req 4 7.4% 23.0% 7.8% 9.7%

7.8%9.7%

Req 4 92.6% 77.0% 92.2% 90.3%

92.2%90.3%

100.0%

DSS Requirement 5Protect against malicious software

Req 5 2.2% 9.8% 0.4% 1.9%

0.4%1.9%

Req 5 97.8% 90.2% 99.6% 98.1%

99.6% 98.1%

100.0%

DSS Requirement 7Restrict access

Req 7 1.1% 4.2% 1.3% 0.3%

1.3%0.3%

Req 7 98.9% 95.8% 98.7% 99.7%

98.7% 99.7%

100.0%

Sustaining Payment Card Security

The lifecycle of PCI DSS controls

Keep the ultimate goal in mind.

The point of payment security is to safeguard customer data, not just pass an assessment.

Make everyone aware of what they need to do.

Assign roles, define responsibilities and verify that everyone understands what’s expected of them.

Thank you.Q&A.

Read Verizon’s 2017 Payment Security Report to get the full picture:VerizonEnterprise.com/PaymentSecurity

Verizon Insights Podcast on iTunesPayment security and PCI compliance: What does it mean and how does it

help to keep you and your customers safe? Featuring: Mauro Lance, COO –

PCI Security Standards Council and Troy Leach, CTO – PCI Security

Standards Council

Contact us:

Paymentsecurity@Verizon.com

Thank you.

Retail & Hospitality Services PCI Compliance: How compliant is your payment security?

Business