GO Indoor

18 Y Y ou work very hard to provide a wonderful experience for those who use your facility, but your reputation can easily be tarnished if you fall victim to a data breach. A data breach can consume your time and financial resources and jeopardize your customer base. These are very serious matters, and the costs related to compromised cards can be staggering. Threats targeting businesses of all types are on the rise because many lack the proper security tools, including firewalls, antivirus software and secure remote access tools. If you are using a computer based point of sale (POS) system that is connected to the internet to process credit and debit card transactions, your business may be targeted. This does not mean that credit or debit card processing on internet-based POS systems is inherently unsafe, but it does mean that facility operators need to pay close attention to the Payment Card Industry Data Security Standards (PCI DSS) and the required protection for hardware and software that allow the system to function without risk of being compromised. Very smart hackers from around the world, using very sophisticated software programs, are searching hundreds of computers every second seeking opportunities to load their malicious malware onto the computers of unsuspecting internet users. These criminals are looking for a weakness in the system's protective shield. Once in place, the malware seeks pathways to merchant point-of-sale systems and intercepts the card verification process and sends detailed data to the hacker, which is a breach of the system's security. IS YOUR POINT OF SALE EXPOSING YOUR TO HIGH TECH THEFT? As a business that stores, processes or transmits credit or debit card information, you are required to be compliant with the PCI DSS standards. Being compliant goes beyond implementing a validated payment application as provided by your POS vendor. By taking steps to ensure that your business is in line with compliance standards, you are also making sure your business is more secure. Business owners may be held responsible for breaches of security and loss of customer data. Fines and associated costs of a security breach of customers' private information are substantial. If you are using a POS system, take the following steps to help protect yourself from the consequences of a security breach: • Be sure that the required network security firewalls are in place between your POS system and the internet. • Ensure any ports used for remote access are not left open and in listening mode. • Do not use vendor-supplied defaults for system passwords. Passwords should be unique for all users of computers and POS systems and complex in the use of letters and numbers. • Ensure the entire system is PCI DSS compliant, not just the software. • Be sure appropriate antivirus programs are in place and active. If not secure, determine what you must do to make the system compliant and do it, or abandon the POS system for credit card processing

• Cover