eCommerce News Asia logo
The latest digital commerce news for Asian businesses
Story image

Cybersecurity threats finance sector facing more cunning

Despite Payment Card Industry Data Security Standard compliance improving significantly in 2020, the cybersecurity threats organisations face are more cunning and evasive than they were even two years ago, according to the 2022 Verizon Payment Security Report.

This year's report found that, overall, PCI DSS compliance improved significantly in 2020, with 43.4% of organisations maintaining full compliance, compared to 27.9% in 2019. 

Additionally, while over half (56.7%) of organisations failed their interim validation assessment due to one or more security controls omissions, the security control gap still improved substantially, from a high 7.7% in 2019 to a low 4% in 2020.  

"Despite compliance improvements, we know that bad actors are still out there and stronger than ever," says Sampath Sowmyanarayan, CEO, Verizon Business. 

"Our own 2022 Data Breach Investigations Report found the financial sector continues to be victimised by motivated organised crime, with servers being involved in 90% of financial breaches," he says. 

"As a result, working harder on your current strategy is unlikely to move the needle. To remain safe in today's heightened cybersecurity climate, organisations will need to approach their objectives and goals at a project, program and strategic level."

The Covid-19 pandemic escalated online business activities and payment card transactions, but it also enabled the skillful exploitation of both existing and emerging threats and weaknesses within payment systems and processes. 

Further complicating the payment security landscape for Chief Information Security Officers and other security practitioners, the PCI SSC recently instituted the most significant rewrite of the DSS since its release in 2004. While a significant step forward, security leaders need to focus their attention and resources on getting up to speed with these new requirements. Released earlier this year, PCI DSS v4.0 will go into effect in 2024.

"Substantial industry feedback drove changes to PCI DSS v4.0," says Lance Johnson, Executive Director of the PCI Security Standards Council. 

"Key changes to the standard focus on meeting the evolving security needs of the payments industry, continuously promoting security processes, increasing flexibility for organisations using different methods to achieve security objectives, and enhancing validation procedures."

Design priorities for PCI DSS v4.0

CISOs and their teams will need to apply a logical, coordinated process to evaluate requirements and constraints of PCI DSS v4.0, while navigating their way through the changes. To help organisations within the payment industry simplify the complexity of these new measures and ensure data security, the 2022 PSR includes a toolbox of management models and frameworks useful for negotiating PCI DSS v4.0.

The report highlights that the challenges organisations encounter with data security and compliance management have identifiable cause-and-effect relationships. The key to achieving ongoing growth and stability of security and compliance program performance is to find a way to focus resources on only the parts within the security environment that are currently limiting or blocking further improvement – the weakest links, system constraints or leverage points. As such, strategic planning, coordination and execution at an operational level is paramount for averting costly data breaches.

Potential impact of 5G on payment card compliance

The appeal of emerging technologies, such as 5G and edge computing, gained significant momentum when the COVID-19 pandemic exposed the weakest links of the financial services industry. The speed and stability of 5G will continue to enhance the mobile experience for the payments industry, providing greater customer security through advanced biometric-based identification and verification methods. It also will provide more secure connections for video conferencing, with participants such as financial professionals and loan counsellors.

Financial institutions and merchants will continue to find innovative ways to benefit from 5G-enhanced features, open architecture and Multi-access Edge Computing (MEC) technologies. At the same time, security practitioners need to explore how these new innovations might impact the PCI DSS compliance posture.

Related stories
Top stories
Story image
Sustainable IT
Adobe surveys sustainability at work in Hong Kong employees
The top three sustainability practices are reducing paper usage (46%), digital document storage and management (43%), and curbing electricity consumption (37%).
Story image
Customer Relationship Management
NetSuite helps Australian bridal boutique to scale operations globally
Grace Loves Lace is now using Oracle NetSuite to create enhanced experiences for brides from Queensland, Australia, to locations worldwide. 
Story image
Artificial Intelligence
Exclusive: Uniphore shares how Conversational AI can be the key to business success
Conversational AI and Automation are vital tools to help further promote organisational cohesion and communication, and Uniphore is leading the charge.
Story image
Customer Relationship Management
NetSuite introduces CPQ to help organisations simplify sales process
NetSuite CPQ is the only native configure, price and quote solution built on the NetSuite platform. It works with NetSuite ERP, CRM, and eCommerce solutions
Story image
Mobile Device Management
How to easily scale your mobile workforce and devices for the peak shopping season
Retailers are under constant pressure to streamline processes and become more efficient while looking for ways to improve customer satisfaction levels.
Story image
Payment gateways
PXP Financial partners DisputeHelp management platform
The partnership will provide an end-to-end dispute management platform across all payment schemes for their merchant portfolio.
Story image
Customer Relationship Management
Salesforce launches the first carbon credit marketplace
Salesforce has introduced the Net Zero Marketplace to make carbon credit purchases simple and transparent, aiming to scale the climate-positive impact.
Story image
Data analytics
Cross-team partnerships: The foundation for seamless digital experiences for customers
The region’s digital consumer population will continue to grow exponentially, reaching 370 million by the end of 2022.
Story image
Payroll systems
Video: 10 Minute IT Jams - An update from UKG
Charlie DeWitt and Greg McManus join us today to discuss the importance of payroll in todays operating environments, and why automated processes can often be a key driver of success.
Story image
Future Tech
Top seven CIO disruptions highlighted by Gartner
CIOs need to consider “what if” scenarios to avoid being blindsided by social, behavioural and technological disruptions, according to Gartner.
Story image
Springboard
Springboard, Cataleya to offer switching infrastructure solutions
The partnership bundles Springboard's business intelligence platform with Cataleya's switching solutions to rapidly transform voice and messaging.
Story image
Digital commerce
VTEX and Adyen partner to extend unified commerce experience
"Through our partnership we are creating an all-in-one place that allows sellers to meet customers where they are in the buying process and unlock opportunities."
Story image
Artificial Intelligence
The App Edit: why conversational commerce is overtaking the app
Consumers appear to be suffering choice fatigue and are reducing the time spent across different apps. People favour a small selection of quality items in their wardrobe, and they’re taking the same approach with their apps.
Story image
Artificial Intelligence
WyreStorm unveils new video bars and an HD video system
WyreStorm has released new products, including two video bars and a high-definition (HD) video system, to improve customers' audio and video experience.
Story image
Digital Transformation
L’Occitane Japon reduces fraud with Forter’s platform
L’Occitane Japon increases revenue, reduces chargebacks and fraud, and creates a seamless customer experience with Forter’s fully automated platform.
Story image
Software-as-a-Service
Marketplacer available on Salesforce AppExchange now
Marketplacer is now available on Salesforce AppExchange, an enterprise cloud marketplace, as the Marketplacer Salesforce Commerce Cloud Cartridge.
Story image
BigCommerce
The metaverse, cryptocurrency and NFTs set to revolutionise retail
BigCommerce has released its consumer survey designed to give retailers insight into current and emerging trends shaping the way consumers buy from brands.
Story image
Fintech
Zai announces partnership with TerraPay to accelerate global payments
This partnership supports both Zai and CurrencyFair's product suite, with better coverage across the global payments ecosystem
Story image
Customer experience
Loyalty, pricing and service are D2Cs biggest shortfalls
There is a key gap between brand manufacturer drivers for D2C deployment and their executional shortfalls, a new report reveals.
Story image
Digital Marketing
Optimizely and Orchard partner to scale marketing experimentation
Optimizely has announced a partnership with Orchard to help marketers and organisations scale experimentation through a mix of strategy and platform.
Story image
Cybersecurity
Employees unsure who to go to to report security incident
A new study shows more than 20% of the untrained global workforce do not know who to contact during a security breach.
Story image
Artificial Intelligence
Ordr improves security and management of connected devices
It has implemented more than 80 integrations within the Ordr Data Lake while adding security enhancements to accelerate zero trust segmentation.
Story image
Customer Relationship Management
Digitally evolve the smart way – federated content
Digital transformation became the ‘buzz word’ for many companies. Time to re-evaluate those old legacy systems, move to new and better ways of doing things
Story image
Pattern
Demand for Australian brands grows in China despite tension
67% of China’s cross-border online shoppers expecting to increase their online spending for western and Australian goods in the coming year
Story image
Business Intelligence
IDC finds the majority of executives expecting a recession
59% of respondents believe 2023 will be a recession year. Of these, nearly 30% believe we are amidst a recession. Another 26% expect a recession in later 2022.
Story image
Online shopping
FedEx expands international day-definite delivery services across AMEA
The company says the continuous expansion of the FedEx International Connect Plus (FICP) is also set to fuel cross-border eCommerce growth within the APAC region.
Story image
Verizon
Cybersecurity threats finance sector facing more cunning
The financial sector continues to be victimised by motivated organised crime, with servers being involved in 90% of financial breaches.
Story image
Spryker
Ready, set, flop: four reasons why your online marketplace could struggle to gain traction
There’s a saying that ‘you have to spend money to make money’. That’s not always the case but the old maxim certainly holds true when it comes to online marketplaces.
Story image
Cloud
Banking-as-a-Service to hit mainstream within two years
Some 30% of banks with greater than $1bn in assets will launch BaaS for new revenue by the end of 2024, but half will not meet revenue expectations.
Story image
Cashflow
Exclusive: Corpay plans to provide more hedging features
Corpay addresses border payments and currency risk management. Offering hedging, payment technology, cash flow solutions and exotic currency capabilities
Story image
Cloud platforms
Salesforce partners with Snowflake and introduces ‘Hire Me’ button
According to a recent Salesforce report, 73% of customers expect companies to understand their unique needs and expectations
Story image
Encryption
Entrust advances Sigma Instant Issuance Platform for cards
Unique light curing module for Entrust Sigma instant issuance systems brings new financial card durability and personalization to card issuers.
Story image
Marketing Automation
Marketplacer recognised in Gartner Hype Cycle for eCommerce
Marketplacer has been recognised in the Gartner Hype Cycle for Digital Commerce 2022 as a sample vendor in the enterprise marketplaces category.
Story image
Satellite technologies
Kacific wins big at the World Business Outlook Awards
The Kacific Group has been recognised in the World Business Outlook Awards for providing high-quality broadband services and infrastructure throughout APAC.
Story image
Software-as-a-Service
Jabra launches AI-powered SaaS solution for contact centres
Engineered to transform contact centre call experiences, the solution employs AI technology that provides real-time insights to improve customer calls.
Story image
Data management
Talend Data Health Barometer reveals ability to manage data is worsening
Most respondents believe data is important, 97% face challenges in using it effectively, and nearly half say it’s not easy to use data to drive business impact
Story image
Customer Relationship Management
New kid on the block: How your business can build up its online marketplace expertise
Without the support of a skilled team, it’s impossible to realise the benefits of an online marketplace in full, observes Marketplacer executive Anna Trifonopoulos, VP of Customer Delivery, Marketplacer.
Story image
Artificial Intelligence
CUE Group expands operations at its Singapore hub
The Singapore-headquartered digital technology group has doubled down on its expansion into the Southeast Asian region.
Story image
Customer Relationship Management
Diagnostic: Does your tech stack up for growth?
It’s common for tech companies to encounter limitations in their tech stack as they experience growth. After all, at first, you only need to invest in systems to support the needs of an early-stage or single-entity business.
Story image
Artificial Intelligence
Salesforce introduces new Customer 360 innovations
Salesforce has introduced new Customer 360 innovations, which are set to provide companies with better automation and intelligence technologies.