We speak to Microsoft\u2019s Pinar Salk to understand how innovations in point-to point encryption are helping retailers and merchants to provide a more secure POS experience for their customers.<\/strong><\/h2>\n <\/p>\n
Juniper Research predicts that rapid digitization of the enterprise space will raise the cost of data breaches to US$2.1 trillion globally by 2019, almost four times the cost of breaches in 2015. In fact, British insurance firm Lloyd\u2019s estimated that cyber attacks already cost businesses up to US$400 billion a year, which includes direct damage plus post-attack disruption.<\/p>\n
\u201cThe growing cost of increasingly sophisticated cybercrime has made security a top priority for retailers at the POS, whether customers are purchasing products online via their smartphone, at an interactive in-store kiosk or a traditional cash register,\u201d says Pinar Salk, Microsoft\u2019s industry solutions director for Retail.<\/p>\n
Today, any organization or merchant that captures, transmits, processes or stores any cardholder data must adhere to the global Payment Card Industry Data Security Standard (PCI DSS), which aims to reduce credit and debit card fraud. In addition, financial institutions in Europe, Latin America, Asia Pacific, Canada and the US issue chip-and-pin or contactless credit and debit cards that meet Europay, MasterCard and Visa (EMV) standards, while merchants and retailers operate EMV-ready POS devices.<\/p>\n
\u201cAlthough EMV technology confirms that cards and cardholders belong together, it doesn\u2019t encrypt card data passing from the merchant to the payment processor, leaving it vulnerable,\u201d explains Salk. \u201cAs retailers and merchants, rather than banks, are now liable for fraud if they do not have EMV-ready POS terminals, they\u2019re looking for ways to protect card data quickly and easily.\u201d<\/p>\n
According to Salk, point-to-point encryption (P2PE) is the \u201cmost logical route\u201d to protecting the retail environment with minimal cost and effort, particularly as retailers adopt new payment technologies, such as mobile and contactless cards.<\/p>\n
\u201cP2PE is a payment security solution that ensures confidential credit and debit card data is encrypted at all times, from the moment the customer inserts or taps their card at the POS, to the moment the payment is authorized by a third-party payment processor,\u201d she explains. \u201cIt secures all devices, applications, servers, databases and IT systems involved in the transaction process, and because the card data is instantly converted into indecipherable code, fraudsters are only able to access useless information. P2PE is the quickest, cheapest and most convenient way for retailers to protect their customers\u2019 privacy.\u201d<\/p>\n
Most importantly, Salk highlights, implementing a PCI-verified P2PE solution reduces the costs, time and complexity associated with completing PCI DSS audits.<\/p>\n
\u201cPCI DSS compliance is required for all systems involved with the credit card processing, so retailers and merchants must typically audit 284 controls each year to prove PCI compliance,\u201d she says. \u201cHowever, P2PE reduces this to just 19 because they no longer need to evaluate the POS, operating systems and internal networks. Plus, penetration tests and vulnerability scans are no longer required.\u201d<\/p>\n
Microsoft\u2019s go-to-market P2PE partner is FreedomPay, which has developed the world\u2019s first PCI-validated P2PE payments solution with EMV, NFC and real-time data capabilities on Microsoft Azure. The Freedom pay Commerce Platform safeguards sensitive card and customer data<\/p>\n
\u201cCard data from a retailer\u2019s POS is encrypted and then decrypted inside the FreedomPay Commerce Platform\u2019s hybrid cloud infrastructure before it is securely transmitted to payment processor for authorization,\u201d<\/strong><\/p>\nTo date, the platform has helped multiple retailers, hospitality providers and other organizations to protect customers\u2019 data. Food service provider Compass Group, for example, now relies on FreedomPay\u2019s solution to securely process customers\u2019 mobile transactions via its EMV-ready payment terminals at dining venues in more than 50 countries worldwide, including at Microsoft\u2019s headquarters in Redmond, US. Not only have the card data tokenization capabilities increased Compass Groups\u2019 transaction capacity and made payments secure, but they have also boosted sales and enhanced customer satisfaction.<\/p>\n
Salk expects payments to become even more secure over the next year as more retailers continue to adopt POS systems powered by Microsoft\u2019s Windows 10 operating system, launched in July 2015.<\/p>\n
\u201cWindows 10 provides maximum protection against malware \u2013 today\u2019s biggest cybersecurity threat \u2013 while the built-in mobile device management features and the multi-factor identification and authentication capabilities make it easier for retailers to secure POS devices. Together with our partners, Microsoft is leading the way in P2PE and significantly enhancing POS security for our retail clients and their customers.\u201d<\/p>\n
<\/a><\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":"
Innovations in point-to point encryption are helping retailers and merchants to provide a more secure POS experience for their customers.<\/p>\n","protected":false},"author":41,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"categories":[1501],"post_tag":[],"content-type":[1483],"coauthors":[1599],"class_list":["post-1795","post","type-post","status-publish","format-standard","hentry","category-retail","content-type-thought-leadership"],"yoast_head":"\n
Protecting customer data at the POS - Microsoft Industry Blogs<\/title>\n \n \n \n \n \n \n \n \n \n \n \n \n \n\t \n\t \n\t \n