Validated P2PE for Reduced Compliance Scope, More Peace-of-Mind

Transcription

1 Validated P2PE for Reduced Compliance Scope, More Peace-of-Mind

2 Customers believe companies are 70% responsible for guarding their information. 1 Whether you re prepared or not, data breaches happen. There were 1,080 breaches with a total of 1.7 billion records exposed as of October If your business were targeted, are you confident that your card payment data is secure? Would your card data security measures pass a Payment Card Industry Data Security Standard (PCI DSS) audit? 1 Experian, Myth Buster: Most Consumers Aren t at Risk for Identity Theft, September 18, Identity Theft Resource Center, Data Breach Reports, October 18, 2017

3 Nothing to Find, Nothing to Steal TM Incorporating multiple layers of security is considered a best practice for data protection. Safe-T Link with P2PE Protect is a validated, semi-integrated solution that is EMV certified, and delivers point-to-point encryption (P2PE) and tokenization to isolate sensitive payment card data from point-of-sale (POS) or property management systems (PMS). Elavon s triple security layer effectively removes card data from your network. So, there is literally nothing for hackers to find or steal. Satisfy Customers and PCI DSS Requirements Your customers aren t the only ones who hold you responsible for protecting their payment information. The PCI Security Standards Council established strict guidelines for processing and storing card data. Non-compliance can result in enormous fines and penalties from the payment card brands which must comply with PCI DSS standards. Even worse, a data breach could result in loss of reputation and your business. But PCI DSS compliance requires significant time, money and personnel. Even the costs associated with using a QSA to manage the assessment can reach into seven figures for large, Tier 1 businesses. Safe-T Link with P2PE Protect is a cost-effective solution that not only safeguards your business from the risks associated with card data breaches, but also reduces PCI DSS compliance scope. Because Safe-T Link with P2PE Protect integrates a combination of secure devices, applications and processes to guard sensitive card payment data from the point of interaction throughout its delivery to our secure decryption environment, it meets rigorous PCI Security Standards Council requirements for a validated solution. As a result, you ll save time and money related to assessments and avoid the high cost of non-compliance. Safe-T Link with P2PE Protect helps you reduce the risks of managing payment card data, while reassuring your customers that you are serious about the safety of their information.

4 SAFE-T LINK P2PE PROTECT DELIVERY Simplify PCI-validated software application that resides within Elavon payment terminals and securely integrates into POS or PMS systems Supports a variety of terminals without direct coding Eliminates need for EMV certification Fusebox Secure, reliable single payment gateway with the flexibility merchants need to easily handle growing payment and other transaction volumes Anytime, anywhere processing One to many connections Advance reporting Eases encryption and tokenization integration POS/PMS SIMPLIFY DEVICE FUSEBOX PAYMENT GATEWAY ISSUER/PAYMENT PROCESSORS SECURE CONNECTION EMV-capable terminals authenticate the card at the POS, ensuring that it s valid. We encrypt card data throughout the entire transaction loop, from entry to data processing Encrypted data can only be decrypted at Elavon s secure site. Simplify, our payment application, triggers creation of a token that replaces payment card data keeping it safe both in transit and at rest, as well as for subsequent charges.

5 SAFE-T LINK WITH P2PE PROTECT FOLLOWS A STRICT CHAIN OF CUSTODY SECURITY PROCESSES Merchants document and follow required procedures, train staff on secure data management, and ensure quarterly checks and process audits are performed PHYSICAL SECURITY Merchants securely receive devices directly from key-injection facility ELAVON SOFTWARE APPLICATIONS Elavon s PCI-validated Simplify prevents storage of unencrypted card data in merchant environments POS/PMS APPROVED KEY-INJECTION FACILITY Securely receives and injects the payment devices, then deploys directly to merchant APPROVED PAYMENT DEVICES Approved Manufacturer fulfills order and ships PCIapproved payment devices PCI DSS compliance is serious business. You can t afford to trust your customers card data or your payments processing and data management to just anyone. You need a security solution that can effectively shield sensitive payment information and ensure that you, your staff and your systems follow established PCI Security Standards Council requirements while processing card payments. That solution is Safe-T Link with P2PE Protect.

6 Elavon processed more than 4 billion restaurant transactions valued at more than $56B in the last 12 months. Why Elavon? Elavon is one of the first payments processors to offer a validated P2PE solution. This means you can take advantage of our security leadership, as well as a proven gateway and acquiring platform. Our knowledgeable team of security professionals will guide you in making wise investments for your business. For more information on Safe-T Link with P2PE Protect and other security solutions, visit Elavon Inc. Elavon, Simplify and Safe-T Link are registered trademarks in the United States and other countries. Nothing to Find, Nothing to Steal is a trademark in the United States and other countries. All rights reserved. This document is prepared by Elavon as a service for its customers. The information discussed is general in nature and may not apply to your specific situation. ELV-SOLS US-Jan 18