Saturday, 26 September 2009
Small Site PCI DSS Network Security Service Provider Saturday, 26 September 2009
N E T W O R K S
Small Site PCI DSS Network Security Service Provider Saturday, 26 September 2009
Bill Farmer CEO Turnkey Internet productivity solution System-wide PCI DSS Operations - Australasia, South Africa, Middle East, UK, Europe
TM
Saturday, 26 September 2009
Enterprise and Risk Services Top 4 global business consultancy, Mako System assessment and certification partner, service provider, partner for merchant compliance, PCI DSS QSA, PA DSS QSA, global ASV partner
TM
Maximise Internet Productivity and Minimise Associated Costs
Saturday, 26 September 2009
Why PCI DSS
The Payment Card Industry have responded to the sharp growth of credit card fraud, identity theft and other credit card associated crimes by developing a security standard for all users of their services.
TM
Saturday, 26 September 2009
Repercussions of Non-Compliance Failing to comply with the mandatory PCI DSS requirements is not an option for ongoing credit card acceptance. Non-compliance will result in a range of penalties imposed by the Payment Card Industry to both the financial institution (Acquirer) and the Merchant concerned. The penalties include fines, restrictions and the possible loss of ability to accept card payments. TM
Saturday, 26 September 2009
What is the Mako System? •
Managed Services Platform for Broadband Networking
•
Specifically developed to connect SMEs via the Internet
•
Public Internet
The Mako System consists of:
• •
A range of appliances A hosted central management platform
TM
Saturday, 26 September 2009
The Mako System & PCI DSS •
Specifically suited for merchants using POS over IP
• • • •
Easy deployment PCI DSS networks stay compliant Automated Identifies fraudulent terminal replacement
TM
Saturday, 26 September 2009
Meeting PCI DSS Compliance Traditional solutions: • High amount of ongoing engineering • Extremely costly • Core network upgrades With the Mako System: • Not just a firewall • Complete PCI compliant network management system • Turnkey • Cost effective PCI DSS networking security service
TM
Saturday, 26 September 2009
Maintaining PCI DSS Compliance with Mako The Mako System ensures that merchants remain compliant. PCI status reporting. Proactive alerts advise when a merchant is at risk of breaching PCI DSS compliance. Automatically detect and advise fraudulent replacement of IP-based EFTPOS terminals. TM
Saturday, 26 September 2009
PCI DSS Compliance Requirements 212 requirements need to be met in order for an organisation to become compliant. These are split into 3 general categories:
• • •
Network Security Card Holder Data/Physical Security Documentation
TM
Saturday, 26 September 2009
Importance of Using Mako in Achieving Compliance The Mako System addresses 100% of the Network Security requirements under the PCI DSS. No other security vendor does this. Additionally the Mako System assists compliance in the documentation process. Mako has produced a set of QSA-approved online documentation & procedures to provide a complete PCI DSS solution.
Saturday, 26 September 2009
TM
Card-Present Merchants Meeting PCI DSS Compliance 100% 75% 50% 25% 1
2
3
4
5
6
7
8
PCI DSS GOALS
Mako Compliance
Saturday, 26 September 2009
9
10
11
0% 12
Non Networking Requirements
TM
Card-Present Merchants Meeting PCI DSS Compliance 100% 75% 50% 25% 1
2
3
4
5
6
7
8
PCI DSS GOALS
Mako Compliance Physical Security
Saturday, 26 September 2009
9
10
11
0% 12
Mako QSA Bundle Compliance
TM
PCI DSS Network Vendor Comparison - Day 1 100% 75% 50% 25% 1
2
3
4
5
6
7
8
9
10
11
0% 12
PCI DSS Goals
Mako with QSA bundle
Saturday, 26 September 2009
Other Security Vendor
TM
PCI DSS Network Vendor Comparison - Day 90* 100% 75% 50% 25% 1
2
3
4
5
6
7
8
9
10
11
0% 12
PCI DSS Goals
Mako with QSA bundle * With no on-site visits or engineering costs
Saturday, 26 September 2009
Other Security Vendor
TM
Miscommunication About Gaining Compliance • •
No single solution can address all issues of compliance. All providers must be PCI DSS compliant in order for a merchant to be compliant.
•
Miscommunication from payment gateway providers stating that using their system provides full compliance.
TM
Saturday, 26 September 2009
Cost Comparison The Mako System Upfront cost - (hardware, licences, warranty)
$0
Upfront integration & documentation cost for merchant - SAQ D
$0 $0
Ongoing cost - total system cost retailing @ maximum $150 p/m Total Upfront Cost $0 Maximum Total Ongoing Cost p.a. $1,800 Other Vendors Upfront cost - hardware $2,250-$7,500
$6,000 avg.
Upfront integration & documentation cost for merchant - SAQ D
$11,520 $17,520**
Ongoing cost technical support (avg. 52 hours p.a.) $6,240* Total Upfront Cost (avg.) $17,520 Total Ongoing Cost p.a. $6,240 TM
* based on Certified Network Engineer minimum hourly rate of $120 ** Prices in US Dollars
Saturday, 26 September 2009
PCI DSS Service Providers Until now in order to provide a PCI DSS compliant service an organisation needed to first achieve certification themselves. International telecommunications companies are spending tens of millions of dollars in a bid to become compliant and in many instances have not been able to achieve the same. Most System Integrators unwilling to invest to become compliant. The associated costs are due to the complexity of the PCI DSS requirements. TM
Saturday, 26 September 2009
Adopting the Mako System Utilising the Mako System means that independent certification by the partner is not necessary. The Mako System is PCI DSS Certified and will maintain certification. Minimal cost, turnkey, shrink-wrapped product offering with major market differentiation. The least disruption and the faster speed to market.
TM
Saturday, 26 September 2009
Benefits of the Mako System in PCI DSS Compliance For businesses wanting to provide a PCI DSS compliant Networking and Security Service to Merchants the Mako cloud computing model is the most effective solution.
• • • • • • •
Zero touch High margin Reduced support costs Positive reinforcement of value creating less churn Greater profits and annuity revenue stream Increased customer satisfaction Automatically detect fraudulent replacement of IP-based POS terminals TM
Saturday, 26 September 2009
Mako System Overview The Mako System offers:
• • • •
Connection Protection Control Reporting
With Mako; Aquirers, Merchants and Service Providers receive comprehensive reports that assist with ensuring compliance is maintained and helps facilitate the compliance process. TM
Saturday, 26 September 2009
TM
Maximise Internet Productivity and Minimise Associated Costs
Saturday, 26 September 2009
PCI Business Case Compelling event Mandatory compliance now to 2012 Go-To-Market January 2010 Market differentiation Route to market Education process for merchants Direct customer engagement Bundled offerings to maximise revenue streams
Saturday, 26 September 2009
Options for Adopting the Mako Solution •
Reseller
•
Distributor
•
Node Operator
TM
Maximise Internet Productivity and Minimise Associated Costs
Saturday, 26 September 2009
Reseller • • • • • • •
Entry level No Capital Expenditure Pay as you go Site Customisation Billable Margin 20% Utilise Mako infrastructure Financing options available
TM
Saturday, 26 September 2009
Distributor • • • • • • •
Intermediate level Bulk purchase starting at 500 units – hardware and licences Payment split between order and delivery Site customisation included – operational side Margin 40% Utilise Mako infrastructure Financing options available TM
Saturday, 26 September 2009
Node Operator • • • • • •
Full adoption level Bulk purchase of licences Full site customisation included Margin 75% + Customer infrastructure require Financing options available
TM
Saturday, 26 September 2009
Saturday, 26 September 2009
Saturday, 26 September 2009