|
市場調查報告書
信用卡資訊保護之因應策略
Guarding Precious Cargo: The Evolving Function of Compliance Initiatives (CISP/SDP/PCI) in Protecting Cardholder Data
|
本報告已在2011年07月19日停止出版。
不用說電子交易已深入我們的日常生活當中，消費者對於信用卡消費的方便、快捷、安全也早已熟悉, 並期待將來能更加方便快捷，而且安全。電子交易網絡為了獲得消費者最大的信任，同時必須擁有相對的安全性。
關於消費者消費產業科技及其利用擁有實績的美國調查公司 Mercator Advisory Group, Inc.（總公司：麻薩諸塞州），針對信用卡協會所頒布的安全性標準而展開的因應策略做了詳細的調查分析並出版報告書 "Guarding Precious Cargo: The Evolving Function of Compliance Initiatives (CISP/SDP/PCI) in Protecting Cardholder Data" 。
本報告書內容包括：對 CISP/SDP/PCI 等加盟店及服務提供業者的安全性規範內容、美國5大安全性因應業者的產品及服務簡介、美國加盟店管理公司的安全性因應業者之選擇、違反信用卡協會的安全性規範的後果、針對安全性因應市場中新興技術及趨勢分析安全性因應市場的未來性等 ，包含 4 個圖表共計 21 頁的內容，內容綱要摘記如下 。
1. 前言
2. 信用卡協會的安全性因應計畫
- Visa CISP（Cardholder Information Security Program）
- Annual Report on Compliance
- System Perimeter Scan
- Annual Compliance Questionnaire
- MasterCard SDP （Site Data Protection）
- PCI (Payment Card Industry) Data Security Standard
- Discover/American Express/JCB/Diners Club的安全性因應計畫
3. 安全性因應業者
- Ambiron
- SecurityMetrics
- TrustWave
- Ubizen
- VeriSign
4. 因應：電子交易所需成本
- 信用卡持有人對違反安全交易的反應
- 對加盟店、加盟店管理公司、提供服務業者的影響
5. 安全性因應的演進
Abstract
When the card associations publish directives, it is not an option for their members to ignore
them. The message from the associations is simple: turn your back on their mandates and pay the
consequences. Ignorance is, in these cases, far from bliss.
This research report complements prior research by Mercator Advisory Group with coverage of
security initiatives that card associations are mandating for their members. It is vital that
stakeholders are aware of their responsibilities for preserving the integrity of not just their
location, but the entire payments value chain. Table of Contents
1. Introduction
2. Card Association Security Compliance Programs
- 2.1. Visa CISP (Cardholder Information Security Program)
- Annual Report on Compliance.
- System Perimeter Scan
- Annual Compliance Questionnaire
- 2.2. MasterCard SDP (Site Data Protection)
- 2.3. The Payment Card Industry (PCI) Data Security Standard
- 2.4. Card Data Compliance Programs from Discover, American Express, JCB and Diners Club
3. Security Compliance Vendors
- 3.1. Ambiron
- 3.2. SecurityMetrics
- 3.3. TrustWave
- 3.4. Ubizen
- 3.5. VeriSign
4. Compliance = the Cost of Doing E-Business
- 4.1. Cardholders Response to Security Breaches
- 4.2. Repercussions for Merchants, Acquirers and Service Providers
5. The Evolution of Security Compliance
|
