Showing posts with label mobile security. Show all posts
Showing posts with label mobile security. Show all posts

Wednesday, June 17, 2015

Point of Sale Trends to Consider This Summer

ComputerWithChainRM
Point-of-sale systems have made life much easier for retail owners in an increasingly fast-paced economy. As this summer gets into full swing, PoS developers continue to improve their software to perform even more functions. Take a look at some of the ways you can incorporate the latest advancements into your store.

 

Trends to Take Advantage Of

If there’s anything customers value, it’s time. Mobile PoS systems make it easier for shoppers to select and pay for their purchases via the sale software on an employee’s tablet. Skipping the cash register line altogether is a dream come true for the time-crunched consumer. It saves your business time as well, enabling you to find relevant data on your inventory and the patron’s own shopping history straight from your all-purpose device.
 
You don’t even have to be a massive, cutting-edge household name to get in on this trend. New systems (like TouchSuite’s Firefly and Ingenico’s smart tabletPoS) are designed specifically for small businesses, so they can start reaping the rewards of state-of-the-art sales software with mobile compatibility.
 
Other useful trends that empower the customer while predicting sales include iBeacons and shopping-enabled social media. While these are not PoS systems, they work to bring more shoppers through your door. Beacons send mobile notifications (such as announcements of discounts) when customers are nearby, and social apps help shoppers keep track of where they can get the items on their wish lists through omnichannel integration.
 
Mobile PoS is currently a noticeable trend in tech-focused stores, but it’s picking up steam as a viable checkout method in the retail industry. Not only do such innovations save time, they are also better than older payment methods at securing monetary info from data thieves.

 

Mistakes from 2014 to Avoid

As with any new venture, mobile PoS has had some stumbles to overcome. The major concern in 2014 was the security of the new software. PoS-focused malware is nothing new, but the prevalence of the Backoff malware family has proved just how important it is to make sure that newer technology is armored against data invasion.
 
Therefore, the biggest mistake from 2014 that forward-thinking retailers will wish to avoid is that of underestimating malware developers. With evolving software gaining the ability to compromise cloud data and overcome two-factor authentication, retailers should never get too comfortable with their existing security systems. Just like technology itself, the measures protecting that technology can always be improved.
 
Problems to be aware of include phishing attacks, software that hasn’t been updated recently, and disgruntled employees who know their way around a computer. Not only your own security, but that of your PoS vendor, is crucial to keeping your customers’ data safe. A highly recommended defensive strategy is to whitelist your system, only permitting it to perform certain functions instead of running the full range of programs it’s capable of. For more detailed security measures you can take, it would be wise to discuss your options with a reputable computer security consultant.
 
The good news is that it is relatively easier for smaller businesses to stay ahead of the security curve. While national corporations may seem impenetrable because of their sheer size and positions of leadership, last year’s Target breach showed otherwise. The security advantages of being an SMB include a closer connection with your IT professionals, faster PCI compliance, and fewer obstacles to an across-the-board software upgrade. All of these make it harder for hackers to keep up with you than with larger companies, whose technological progress is often lumbering by comparison.

 

Different Formats to Accomplish Your Marketing Objectives

You may not have the budget to accomplish the impressive technological feats of Nike and Burberry, but you can be a part of the future of retail nonetheless. Converting your operations to mobile and managing your inventory that way is only going to get easier. As businesses prepare to accept contactless payment alongside traditional magnetic cards, in the famous EMV liability shift, this may be the best time to implement upgrades that will put you ahead of the competition.
 
If you run a high-traffic boutique, the right system will help you build an important reputation for having fast and competent service. In time-consuming industries like hairdressing or furniture shopping, the convenience of your system will add value to your clients’ lives and justify their choice to patronize your business.
 
If you have already implemented the latest PoS technology in your business, how has it affected your everyday proceedings? If you’re still researching and observing the impact of these trends on others, what considerations would you like to have met before you commit to a system?
 
To view the original article please visit: https://retailminded.com/point-of-sale-trends-to-consider-this-summer/

Saturday, June 9, 2012

PCI Compliance for Mobile Point of Sale

PCI Council Releases “Accepting Mobile Payments with a Smartphone or Tablet”

By Amy Hanson, One Step Retail Solutions


“We know merchants are eager to take advantage of their existing smartphones or tablets to accept payment cards,” said Bob Russo, general manager, PCI Security Standards Council. “And the Council and its stakeholders, want to help the market to do this in a secure way. We're excited about this easy-to-use reference that will help merchants understand how to use the suite of PCI Standards to enable their businesses while still keeping data security top of mind.”

80% of identity theft can be traced back to small business breaches in security
With the “mobile revolution” comes a shift in retail security practices by independent retailers looking for cost effective retail technology solutions. Taunted by the allure of a “full mobile POS system” for dirt cheap, it can seem too good to be true when it comes to PCI Compliance. The PCI Security Standards Council state what many have been wondering for some time, “Mobile devices are not necessarily designed to be secure input or storage devices for cardholder data. Your mobile payment solutions thus requires additional technology, including encryption to secure cardholder data acceptance.”

At this point, the exact regulations and guidelines have yet to been fully defined by the PCI Council regarding mobile point of sale systems. So, when a prospective mobile POS provider has stated that they are PCI compliant, this does not necessarily mean that any specific actions have been taken to ensure that the specific system is secure. Factually, PCI compliance is not limited to your software capabilities and while you may be attempting to form up a small business on a dime with an iPad and a $15 a month system, you are in the hot seat if you are not only PCI compliant but truly secure.

How “hot” is the hot seat?

The reason this is of absolute importance to you as a retailer, is you could personally be held accountable for everything from full reimbursement for monies stolen, to a possible $500,000 fine for negligence should there be a data breach which traces back to one of your devices. As you can see, this is very serious business that a fly-by-night POS system should not be trusted with. In this matter, the cheapest option is not necessarily the better option and could effectively close your business.

How to protect yourself and your livelihood
Several heavily marketed and relatively new mobile POS systems are under scrutiny for PCI compliance failure (lack of data encryption is a common oversight). A  long term service provider of point of sale solutions, hardware and supporting systems (security, etc.) will know the ins and outs of how to create a safe point of sale for your retail store.  We recommend a layered approach to security. Our definition of “layered security” would include: Firewall for all internet connections, system back-ups, run regularly and security cameras installed in high theft locations in the store.  In addition to having a security suite, ensuring the mobile POS device you use has data encryption, goes a long, long way to complying with  PCI Compliant regulations.

Summary
A thorough list of best practices is expected before year end. In the mean time, a straightforward paper (link below) gives some hands on advice for merchants including:


  • Leveraging the benefits of the Council's recently published Point-to-Point Encryption (P2PE) standard and program
  • Responsibilities under PCI DSS, and how to translate to mobile payments

Be sure to choose a mobile payment acceptance solution that complements the merchant's PCI DSS responsibilities.

PCI Security Standards Council - Accepting Mobile Payments with a Smartphone or Tablet

If the above link doesn't work, copy and paste this into your browers: https://www.pcisecuritystandards.org/documents/accepting_mobile_payments_with_a_smartphone_or_tablet.pdf