Payment Security SolutionsSecure payment data and enable new customer experiences with CyberSource

CyberSource, a Visa company

Payment acceptance is no longer limited to traditional channels. Businesses are allowing purchases within apps, on social websites, using digital wallets, and even through Internet of Things–enabled devices such as wearables and appliances.

By providing this array of channels, businesses are giving customers the flexibility to make purchases anytime, anywhere, from any device.

“

1 Dark Reading, “Cybercrime: A Black Market Price List from the Dark Web,” www.darkreading.com/cloud/cybercrime-a-black-market-price-list-from-the-dark-web/d/d-id/1324895

As businesses introduce new ways for customers to pay, they

must work to control security risks. Those risks increase as

more and more sensitive card data comes into contact with a

growing number of hardware- and software-based business

systems. Hackers and other cybercriminals will target

any system where there is payment data as long as stealing

this data is lucrative.

The price each credit card number with owner information can fetch on the black market1

$30

The presence of payment data in a variety of business

systems adds costs and complexity to Payment Card Industry

Data Security Standard (PCI DSS) compliance. Businesses

need ways to reduce PCI DSS compliance scope while

adhering to evolving standards.

CyberSource payment security solutions can help you

address these challenges. With CyberSource solutions,

you can safeguard payment data across payment

channels, reduce PCI DSS compliance scope, and securely

support new customer experiences—all while decreasing

IT complexity.

As a retail organization, PCI compliance is paramount for Batteries Plus Bulbs. Knowing that CyberSource has a very clear understanding of PCI compliance as a Visa-owned company reassures us that we’re keeping up with overall compliance. Plus, we can take advantage of template tools to unify the security and payment experience across many-merchant accounts, easily supporting new stores or merchant accounts as necessary.”

—Dan Dugan, Director of Application Services at Batteries Plus Bulbs

2 Forrester, “The State of Retail Payments 2016: Securing Consumer Payment Data Continues to Dominate the Payments Agenda,” 2016, www.forrester.com/report/ The+State+Of+Retail+Payments+2016/-/E-RES135924

of surveyed retailers anticipate

implementing multichannel tokenization by the end of 20172

61%

T

Safeguard Payment Data and Reduce PCI Scope

Secure New Payment Experiences

Payment data is critical to business, but it’s toxic if

mishandled or stolen. You can avoid the potential financial

losses, erosion in customer loyalty, and brand damage that

might result from compromised payment data with solutions

from CyberSource, a certified level 1 PCI service provider.

CyberSource payment security solutions help keep sensitive

customer payment data safe by removing it from your

network and storing it in secure Visa data centers.

Removing payment data from your network with CyberSource

off-premises payment security solutions not only reduces

risks, it can also help decrease PCI compliance requirements

to a few checkboxes, enabling you to manage PCI DSS

compliance faster and with less cost.

CyberSource offers end-to-end payment security solutions

to support a broad array of payment methods and channels.

CyberSource solutions include point-to-point encryption

(P2PE) for in-person and call center payments, secure

hosted pages for web and mobile browser payments, and a

simple token delivery mechanism for scenarios that support

traditional checkout as well as new flows introduced

through the Internet of Things. Recognizing that improving

the customer experience and meeting brand requirements

are key priorities, CyberSource offers a range of options that

balance PCI scope reduction with user experience and

branding flexibility.

All of these solutions are delivered on a single platform for

easier and faster integration, reporting, and reconciliation.

The solutions are compatible with CyberSource Token

Management Service as well as other CyberSource

payment services.

Simplify Management, Enhance AgilityCyberSource payment security solutions help simplify IT

management and enable you to operate in an agile fashion

to meet your business goals. CyberSource security solutions

span a breadth of payment types and are available on a

single platform so you can deploy with ease and meet

aggressive business deadlines. This single-platform approach

helps you avoid building a siloed payment infrastructure for

each channel, which might hamper omni-channel initiatives

and prevent you from providing seamless omni-channel

experiences in the future.

CyberSource Token Management Service is one of

the CyberSource offerings that can help IT departments

manage payments with agility. It stores card and non-card

payments that have different fields and formats, standardizes

these formats, and returns to you a single token format

you can use to process payments. CyberSource Token

Management Service functions independently of your

banking relationships, so you can retain all the control you

need to modify deployments, change scope, and more—

without any financial implications.

CyberSource Payment Security SolutionsSecure eCommerce and mCommerce Transactions with CyberSource Secure AcceptanceAccept payments from any customer device without

handling sensitive payment data using CyberSource Secure

Acceptance. Offer new customer experiences and safeguard

data while simplifying management and reducing PCI DSS

compliance scope.

CyberSource Secure Acceptance Web/Mobile— Reduce your IT burdenThis fully hosted, easily configurable solution passes payment

data directly from the customer to secure CyberSource servers.

• Reduce compliance scope to checking boxes on the

PCI DSS Self-Assessment Questionnaire A (SAQ A).

• Implement the solution as a redirect solution or embedded

within your website.

5,000+

T

businesses use CyberSource tokenization

• Meet the needs of mobile users—this solution renders

appropriately on all devices, from smartphones to

desktop PCs.

• Simplify global deployments using the pre-built, hosted

form, available in 28 languages, covering 40+ markets.

CyberSource Secure Acceptance Flexible Token API—Retain complete control over the customer experience This solution securely transmits card data directly to

CyberSource and provides you with a token in exchange.

• Protect information and reduce compliance scope by

enabling customer card numbers to be encrypted on their

own devices. By bypassing your systems altogether, you

can typically qualify for SAQ A-EP.

• Retain complete control over the customer’s

payment experience.

By tokenizing payment data, you can help minimize the risk

of sensitive data being stolen or compromised.

• Enhance flexibility, streamline management: Support

a wide variety of payment methods—including POS,

mPOS, eCommerce, card-on-file, Apple Pay, and Android

Pay—while simplifying management by taking advantage

of standardized token formats. An agnostic approach

to processors lets you maintain existing acquiring and

processing relationships.

• Enable omni-channel experiences: Provide seamless

customer experiences across retail sales channels by using

a uniform token solution for all channels.

• Gain a 360-degree view of customer payment activity: Better understand customer behaviors and generate

new insights to drive targeted promotions and

personalized interactions. • Protect payment data in secure Visa data centers:

Keep valuable customer payment data in secure Visa data

centers with CyberSource Token Management Service—

an off-premises cloud solution.

1.1 billion tokens are stored in secure Visa data centers

Protect Call Center and In-Person Payments with CyberSource Point-to-Point EncryptionSafeguard data generated through in-person payments as

well as payments handled by your call center agents with

CyberSource Point-to-Point Encryption (P2PE), powered by

Bluefin. The solution encrypts payment data at the data-entry

point on the terminal, and then transmits it securely through

to payment processing.

• Reduce vulnerabilities: Reduce risks by helping to prevent

unencrypted transaction data from touching your systems.

• Avoid POS malware threats: Prevent POS malware

residing on your system from capturing any readable card

data by maintaining data in an encrypted state.

• Decrease PCI scope: Lessen the scope of PCI compliance

by keeping unencrypted data out of your environment.

Secure Stored Payment Data with CyberSource Token Management ServiceProtect stored payment data by moving it out of your

network using the CyberSource Token Management Service.

For more information, visit cybersource.com/products/payment_security

CyberSource, a wholly owned subsidiary of Visa Inc., is the only integrated payment management platform built on secure Visa infrastructure, with the payment reach and fraud insights of a massive $358 billion global processing network. CyberSource and Authorize.Net payment management solutions help 475,000 large and small businesses worldwide, grow sales, mitigate risk, and operate with greater agility. For more information, please visit www.cybersource.com.

CyberSource, a Visa company