A new Verizon report has found that too many businesses, following their annual assessment for meeting the Payment Card Industry Data Security Standard , fail to maintain ongoing compliance — putting the businesses at increased risk for data breaches, and financial and reputational damages.

The "Verizon 2014 PCI Compliance Report" affirms that payment card transactions remain a prime target for attackers, and the rate at which data breaches are occurring appears to be increasing. It is estimated by The Nilson Report that global credit card fraud exceeded $11 billion in 2012 alone.

According to the report, in most cases, payment card data breaches are not a failure of security technology or of compliance with PCI DSS, but rather a failure to implement appropriate compliance and security measures, as intended.

"We continue to see many organizations viewing PCI compliance as a single annual event, unaware that compliance needs to have a 365 day-a-year focus," said Rodolphe Simonetti, managing director of PCI practice at Verizon Enterprise Solutions.

However, there is a bright spot in the report: Organizations' initial compliance with the PCI standard has shown some improvement. In 2013, more than 82 percent of organizations were compliant with at least 80 percent of the PCI standard at the time of their annual baseline assessment, compared to just 32 percent in 2012.

There were also regional differences due to breach notification laws, varying legal requirements and levels of adoption. The Asia-Pacific region took the top spot (75 percent), followed by the U.S. (56 percent) and Europe (31 percent) meeting at least 80 percent of PCI requirements.

Areas where businesses struggle the most in achieving initial compliance include:

  • security testing (23.8 percent);
  • security monitoring and the ability to effectively detect and respond to data compromised (17 percent); and
  • protecting stored sensitive data (55.6 percent).

"Anything less than 100 percent compliance is an issue for businesses today," said Simonetti. "We have seen time and time again that noncompliance leaves an organization open to credit card theft, which can potentially cost hundreds of millions of dollars when you factor in all the damages, not to mention lost consumer trust and the impact on brand reputation. Organizations need to rethink how they factor in maintaining a PCI-compliant environment, whether it's devoting more resources or working with a managed security services provider."

Read more about retail payments.

Related Content

User Comments – Give us your opinion!
Products & Services

Slabb X5 Informational kiosk

http://global.networldalliance.com/new/images/products/2787.png

2787/Slabb-X5-Informational-kiosk

NeXtrac In-queue Merchandising System

http://global.networldalliance.com/new/images/products/6177.png

6177/NeXtrac-In-queue-Merchandising-System

Olea Human Resource Kiosks

http://global.networldalliance.com/new/images/products/6303.png

6303/Olea-Human-Resource-Kiosks

SLABB X9 Kiosk

http://global.networldalliance.com/new/images/products/7047.png

7047/SLABB-X9-Kiosk

PaySite Bill Payment Kiosk

http://global.networldalliance.com/new/images/products/PaysiteRed_100.gif

250/PaySite-Bill-Payment-Kiosk

Mini Dynasign Player System

http://global.networldalliance.com/new/images/products/dynasign_player_100.jpg

213/Mini-Dynasign-Player-System

Bill Payment KIOSKS

http://global.networldalliance.com/new/images/products/4673.png

4673/Bill-Payment-KIOSKS

SoloHealth Station® Kiosk

http://global.networldalliance.com/new/images/products/5687.png

5687/SoloHealth-Station-Kiosk

Remote Monitoring, Management & Measurment Software - CommandPoint

http://global.networldalliance.com/new/images/products/2260.png

2260/Remote-Monitoring-Management-Measurment-Software-CommandPoint

LG 42WL10MS-B

http://global.networldalliance.com/new/images/products/6445.png

6445/LG-42WL10MS-B

Vend and PayPal White Paper
CONNECT 2014 Mobile Innovation Summit
Request Information From Suppliers
Save time looking for suppliers. Complete this form to submit a Request for Information to our entire network of partners.