Saturday, December 14, 2024
HomeIndian NewsOnly 1 in 4 Global Organizations Keep Cardholder Payment Data Secure

Only 1 in 4 Global Organizations Keep Cardholder Payment Data Secure

  • Only 27.9 percent of global organizations were able to maintain full compliance with the Payment Card Industry Data Security Standard (PCI DSS)

  • Staggering 27.5 percentage point drop in compliance since 2016 as reported in the 2017 PSR

  • Lack of long term strategies and leadership commitment cited as root cause

  • 10th anniversary edition of the Verizon Business Payment Security Report

Global organizations continue to put their customers’ cardholder data at risk due to a lack of long term payment security strategy and execution, flags the newly released Verizon Business 2020 Payment Security Report (2020 PSR). With many companies struggling to retain qualified CISOs or security managers, the lack of long-term security thinking is severely impacting sustained compliance within the Payment Card Industry Data Security Standard (PCI DSS).

Safe & unsafe connections to COVID-19 related domains

Payment data remains one of the most sought after and lucrative targets by cybercriminals with 9 out of 10 data breaches being financially motivated, as highlighted by the recent Verizon Business 2020 Data Breach Investigations Report (2020 DBIR). Within the retail sector alone, 99 percent of security incidents analyzed by the 2020 DBIR were focused on acquiring payment data for criminal use.

The 2020 PSR found that on average only 27.9 percent of global organizations maintained full compliance with the PCI DSS, which was developed to help businesses that offer card payment facilities protect their payment systems from breaches and theft of cardholder data. More concerning, this is the third successive year that a decline in compliance has occurred with a 27.5 percentage point drop since compliance peaked in 2016 (as seen in the 2017 PSR).

Unfortunately we see many businesses lacking the resources and commitment from senior business leaders to support long-term data security and compliance initiatives. This is unacceptable,” said Sampath Sowmyanarayan, President, Global Enterprise, Verizon Business. “The recent coronavirus pandemic has driven consumers away from the traditional use of cash to contactless methods of payment with payment cards as well as mobile devices. This has generated more electronic payment data and consumers trust businesses to safeguard their information. Payment security has to be seen as an on-going business priority by all companies that handle any payment data, they have a fundamental responsibility to their customers, suppliers and consumers.

Additional findings within the 2020 PSR shine a spotlight on security testing where only a little more than half of the organizations (51.9 percent) successfully test security systems and processes as well as unmonitored system access and where approximately two-thirds of all businesses track and monitor access to business critical systems adequately. In addition, only 7 out of 10 financial institutions (70.6 percent) maintain essential perimeter security controls.

This report is a welcome wake-up call to organizations that strong leadership is required to address failures to adequately manage payment security. The Verizon Business report aligns well with Omdia’s view that the alignment of security strategy with organizational strategy is essential for organizations to maintain compliance, in this case with PCI DSS 3.2.1 to provide appropriate levels of payment security. It makes clear that long-term data security and compliance combines the responsibilities of a number of roles, including the Chief Information Security Officer, the Chief Risk Officer, and Chief Compliance Officer, which Omdia concurs with,” comments Maxine Holt, Senior Research Director at Omdia (previously known as Ovum).

Lack of compliance impacts all businesses regardless of size

Small and medium-sized businesses (SMB) were flagged as having their own unique struggles with securing payment data. While smaller businesses generally have less card data to process and store than larger businesses, they have fewer resources and smaller budgets for security, impacting the resources available to maintain compliance with PCI DSS. Often the measures needed to protect sensitive payment card data are perceived as too time-consuming and costly by these smaller organizations, but as the likelihood of a data breach for SMBs remains high it is imperative that PCI DSS compliance is maintained.

The on-going CISO challenge

The report also explores the challenges CISOs face in designing, implementing and maintaining an effective and sustainable security strategy, and how these can ultimately contribute to the breakdown of compliance and data security management. These problems were not found to be technological in nature, but as a result of organizational weaknesses which could be resolved by more mature management skills including creating formalized processes; building a business model for security as well as defining a sound security strategy with operating models and frameworks.

About the Verizon Business 2020 Payment Security Report

Verizon has published the Payment Security Report (PSR) since 2010, the first-ever study on the actual value and performance of the Payment Card Industry Data Security Standard (PCI DSS). The report is based on global data gathered by PCI DSS qualified security assessors (QSAs) from Verizon and other five external contributors.

Disclaimer:

Mojo Patrakar may publish content sourced from external third-party providers. While we make every reasonable effort to verify the accuracy, reliability, and completeness of this information, Mojo Patrakar does not guarantee or endorse the views, opinions, conclusions, or authenticity of content provided by these third-party entities. Such content is presented solely for informational purposes, and it is not intended to substitute professional advice or to serve as a comprehensive basis for decision-making.

Mojo Patrakar expressly disclaims any liability for errors, omissions, or inaccuracies that may arise from third-party content, as well as any reliance readers may place upon it. Users are strongly encouraged to conduct independent verification and consult with qualified professionals as necessary before making any decisions based on information obtained through Mojo Patrakar.

Ravindra Kirti Founder Mojo Patrakar
Ravindra Kirti Founder Mojo Patrakarhttp://mojopatrakar.com/
Ravindra Kirti is a well-rounded Marketing professional with an impressive academic and professional portfolio. He is IIM Calcutta alumnus & holds a PhD in Commerce, having written an insightful thesis on consumer behavior and psychology, which informs his deep understanding of market dynamics and client engagement strategies. His academic journey includes an MBA in Marketing, where he specialized in strategic management, international marketing, and luxury retail management, equipping him with a global perspective and a strategic edge in high-end market segments.In addition to his business expertise, Ravindra is also academically trained in law, holding a Master’s in Law with specializations in law of patents, IT & IPR, police law and administration, white-collar crime, and corporate crime. This legal knowledge complements his role as the Chief at Jurislaw Partners, where he applies a blend of legal acumen and strategic marketing.With such a rich educational background, Ravindra excels across a range of fields, from legal marketing to luxury retail, and event design. His ability to interlace disciplines—commerce, marketing, and law—enables him to drive successful outcomes in every venture he undertakes, whether as Chief at Jurislaw Partners, Editor at Mojo Patrakar and Global Growth Forum, Founder of CircusINC, or Chief Designer at Byaah by CircusINC.On a personal note, Ravindra Kirti is not only a devoted pawrent to his pet, Kattappa, but also an enthusiast of Mixed Martial Arts (MMA) and holds a Taekwondo Dan 1. This active lifestyle complements his multifaceted career, reflecting his discipline, resilience, and commitment—qualities he brings into his professional relationships. His bond with Kattappa adds a warm, grounded side to his profile, showcasing his nurturing and compassionate nature, which shines through in his connections with clients and colleagues.Ravindra’s career exemplifies versatility, intellectual depth, and excellence. Whether through his contributions to media, law, events, or design, he remains a dynamic and influential presence, continually innovating and leaving a lasting impact across industries. His ability to balance these diverse roles is a testament to his strategic vision and dedication to making a difference in every field he enters.
RELATED ARTICLES

Most Popular

Recent Comments