SECURITY

SECTION 2: PROTECTING THE GOODS
POWERED BY
SCANSOURCE
SECTION 2: PROTECTING THE GOODS
DEVELOPER PARTNER SECURITY CHECKLIST
SECURE. SIMPLE. AFFORDABLE.
Editor’s Note: As the Digital Journey Leveraging New Technology
in Loss Prevention article recounted, the importance of having
mobile capabilities and technological flexibility is paramount for
loss prevention professionals, as well as retailers in general. When
partnering with a developer, make sure you’re asking how secure
their platform is so that when it is installed at a merchant site,
security will never be compromised!
insight provided by
David Gudjonsson,
CEO and Co-Founder of
Handpoint
MERCHANT CHALLENGES
• Data breaches are forcing
improved security processes
• Increased liability around
card data breaches
• Difficulty knowing which
solutions are most effective
SCANSOURCE SOLUTIONS
• Provide total POS offerings that
include payment terminal hardware
• Offer complete configuration
and key injection services
• Help navigate the complexity
of payments offerings
800.944.2432 X4219 | SCANSOURCEPOSBARCODE.COM/PAYMENTSOLUTIONS
What are 3 questions you suggest that VARs ask a developer partner
about data security/cyber security before they decide to partner with
them?
☐ DG ☐What kind of solution and provider are you using for EMV?
☐☐Is your solution / provider using an encryption?
☐☐
How us (VAR) is deployment with access and to TMS key injection and remote handled? config Do tools?
you provide
What are some of the precautions you’ve taken to ensure that your
platform is secure before the merchant even installs your product?
Handpoint is built from the ground up to completely abstract payments
DG
from the point of sale and deliver a secure payments solution for
merchants of all sizes. We built our proprietary payment application to
meet all of the PCI-P2PE certification requirements, and we host it within
the tamper proof environment of the card reader, providing multiple levels
of encryption from the instant a card is tapped, dipped, or swiped. No
sensitive information touches the merchant’s systems with our out-of-scope
architecture, and our PCI-DSS platform provides a secure switch to a range
of global processors. We also built a remote terminal management system
to keep merchants secure over time—our terminals stay up-to-date with the
latest security feature with zero merchant effort and lost devices can be
deactivated remotely. Together, the Handpoint solution keeps customer data
secure end-to-end and over time.
Quick poll: P2PE or E2EE? Why?
I N -S TO C K
I N V ENTO RY
TEC H N I C A L
S U P P O RT
WO R LD - C L A S S
LO G I S TI C S
DG
Both. P2PE to the secure decryption point and full E2EE to the
processor. P2PE simplifies the key management for the merchant side.
With E2EE the merchant might need to handle encryption keys itself.
For more information, visit www.handpoint.com
20 APRIL/MAY www.GoRSPA.org
www.GoRSPA.org
Payment Solutions Suite Ad 316.indd 1
3/9/16 9:08 AM
connect 21