What is PCI

Q: What is PCI?

When most people hear PCI they think of the PCI-DSS Payment Card Industry-Data Security Standards.

Below is a video produced by the Payment Card Industry (PCI) Security Council.  Entertaining and informative.

Top security practices (web browsing)

When our customer service team trains our client's staff they notice vulnerabilities in the organization's IT environment.  Many of these organizations are smaller and don't think they are at risk, however, they are more at risk by failing to implement simple and often free practices into their daily work routine.  

Below is a listing of general recommendations our customer service team has provided:

• Set your anti-virus and anti-spyware software to auto-update. 
• Use an Internet firewall (hardware or software). 
• Don't click pop-ups and never download files from websites you don't trust. 
• When making online transactions, be sure web addresses begin with https (not http) and look for a key or padlock icon in your browser window. 
• Upgrade your Internet browser. Newer browser versions support advanced security features, such as phishing site detection and extended security certificates. 
• Don't surf to other sites while you're visiting a secure site; finish your work within the secure site, sign out and close your browser before you move on.

Connected Pay's team of CPA's can help prevent security issues you may encounter.  For more information on PCI Security Standards, or best practices for web browsing, click Operations Consulting.    

Since Jan 2010, we have shown merchants +$294,000 in savings on their processing fees compared to their previous vendor.  We provide merchant accounts, terminals, gateways, virtual terminals, and merchant account pricing negotiations.  Check out our testimonials from our happy clients!

 

Small Business Security - Best Practices

So you are a small business.  You are busy doing numerous tasks and don't have time for everything, but fail to recognize the importance of the security measures below and you could lose everything. Here are some things to think about in regards to that valuable laptop and technology you use everyday and take for granted.  

BEST PRACTICES

No single set of rules will protect every business, but thoughtful owners and managers take steps like these:

Close security gaps: Laptops travel, and contractors and visitors connect to your network. Protect network endpoints, not just perimeter.

Integrate defenses: Combine antivirus, firewall, intrusion detection, and vulnerability management at endpoints – with encryption if they travel.

Patch software: Threats evolve – close vulnerabilities by quickly applying updates you recover from Microsoft and other software providers.

Update virus definitions: Threats evolve – make sure your antivirus software recognizes them, by keeping your virus definitions up to date.

Alert employees: Warn them about the risks of attachments and links in unexpected email, and downloaded software before it is scanned for viruses.

Don’t invite trouble: File-sharing programs and free downloads may install malicious code automatically. Stop them with training, policies, and software.

Strengthen passwords: Require passwords that mix letters and numbers – never names or dictionary words – and change them often.

Schedule backups: Implement and enforce backup schedules – and automate the process as much as possible.

Back up systems, too: Backups are only as good as your ability to use the information you recover, so back up systems and applications as well as files.

Keep backups offsite: Fire, flood, vandalism, and sabotage are facts. Be sure files and systems can survive loss of your facility, or even a regional disaster.

Test backups: Don’t wait until data recovery to discover a resource, process, or technical shortcoming – test the entire backup and recovery cycle.

Get help: Find a local IT partner who understands and can help with both your business and technical requirements, and whom you trust.

Many of these security features take some time to set up, but can be automated once established.  Set a calendar appointment or designate a partner or employee to take care of those items that need some human judgement.    

Thanks to Symantec for these great security measures.