Kanganga
- Butimwaean kabwakamwane
- Kabwakamwane n taian card aika a kewe ke a kimoaki.
- Aki irakin nanon te Payment Card Industry Data Security
- Standards (PCI DSS), ao rekenikai.
- Aki irakin tuan tararuan te data man kawakinan rongorongoia taan bwaibwai n te card ibukin mwakuri aika a aki riai ke inanon te tai ae maan.
- Kaokan te mwane nakoia customers aika a kewe bwa e aki roko aia bwai are a kabooi, ke e kairua ke e uruaki n rokona.
Karaoan Kabwaka Mwane
- Karaoan kabwakamwane nakoia taan iraa iaon taian website aika a aki koaua ke ibukin bwaai ao mwakuri aika akea rabwataia.
- Te karaimwanenakon taian account aika a kewe ibukin bwaai ao mwakuri ma bon akea rabwataia (e kanganaga iroun te bangke bwa e na kaboa mwiin te mwane ae e kimoaki n te aro aei)
- Phishing emails (emails aika a kewe) – ko kamwaneaki bwa ko na anga rongorongon am card iaon taian website aika a kewe.
- Vishing phone calls (tareboon aika a kewe_ – ko kamwaneaki bwa ko na kaota rongorongon am card iaon te tareboon.
- Bwaai aika uoua ae a tibwa tia n taekinaki bon taian katoto ibukin te social engineering.
Kabwakamwane aika a mano
- Butimwaean taian kabwakamwane
- Taraia raoi bwa e mano raoi am website ibukin te bitineti ibukin kamanoaia ao karauan nanoia am customers (nora Secure Websites, i nano).
- Ngkana ko butimwaea te bobwai n te card, taraia raoi bwa e ira nanon te Payment Card Industry Data Security Standards (PCI DSS) am bitineti, ae aia tua e kakaokoro ma ‘rinania taan kabobwai’ ao te tia karaoa te card (nora Compliance Criteria ao PCI levels, i nano).
- Ngkana ko kanakoi bwaai, kabongana te kakoaua bwa e na totokoa te kabomwi.
- E a bon nakon tein am bitineti ao mwaitin kabwakamwane, iangoa kabonganan te PayPal ao te kabwakamwane n te mobile bwa e buoka riki kamanoan am bitineti.
Kabwaka Mwane
- Taraia raoi bwa e mano te website are ko kabongana ngkana ko bobwai online ke ko karaoa te direct payment nakon te supplier. E na riai n iai kanikinaean te roka n te browser window frame (te tabo are e mena iai ana link te website) ae e oti ngkana ko kataia n log in ke n register. Taraia bwa e na aki ti oti tamnein te roka iaon te page anne … aio te kanikina bwa te website ae e kewe. E na riai te web address ni moanaki ma ‘https://’. Te ‘s’ anne e tei ibukin ‘te mano’. Uringnga bwa e ti kaotaki ikai bwa e mano te link imarenam ao te tia bwaibwai n te website, ma tiaki nanona bwa e koaua te website. Ko na tuoa raoi te address anne ngkana iai buren koroboki, taeka ao man aika a raka ao bwai riki tabeua aika a aki kantaningaki.
- Kabonganai taian password aika a kanganga ao a kawakinaki raoi irouia nake aia bwai.
- Kamatoai raoi tuua ibukin kabonganakin ana card te kabwana irouia taan mwakuri – n ikotaki ma te PIN ao tararuan te password ao aanga ibukin totokoan katotongan te card.
- Uringnga bwa e mano riki kabonganan te credit nakon kabonganan te debit card ke te direct payment.
- Ongora n am bangke bwa antai tabena te kabua n te mwane inanon tain te iraa. Wareka raoi tuan aia boraraoi ao ngkana ko nanououa, reitaki ma te manatia ibukin te bitineti n am bangke.
- Ana kainibaire te Merchant PCI DSS ao rinanin te PCI
- Irakin bwaai aika a kainnanoaki e a bon nakon rinanin ana waaki te tia bitineti
- Iai aua te karinan aika a boboto iaon mwaitin te bobwai n te credit/debit card inanon teuana te ririki.
- Ngkai payment brands (kambwana n te card n aekan VISA ke mastercard) ngaia aika a bairei rinanin bwaai aika a kainnanoaki ibukin te bobwai n aia brands (aia card), taian acquirers (n aron te bangke) a tabena irakin raoi rinanin nako kainibaire aikai irouia taan bitineti.
- A kaotaki inano rinanin nako kainibaire (compliance levels) aikai a tei ibukin mwaitin te kabobwai iaon teuana te kambwana ni card n te ririki.
- Mwaitin te kabobwai aika a karaoaki online ke rinanon taian kabwakamwane aika a karaoaki n anga riki tabeua, a tatannako n baireaki mai irouia kambwana n te card aika a kakaokoro, ma angiin te tai ao e bon bane n ikotaki bobwai ni kabane.
Bwaai aika a kainnanoaki iaan Karinan 1
Taan bitineti aika a roko mwaitin aia kabobwai iaon 6 te million n te ririki, ke taan bitineti aika a tia ni mwanibuakaki aia data
Kakoauan bwaai aika a kainnanoaki iaan Karinan 1
Karaon te Annual Onsite Security Audit (rinanoaki iroun te QSA ke te Internal Audit ngkana e a tia n tiainaaki iroun te tia mwakuri man te kambwana n bitineti ao man tia n kariakaki iroun te bangke) ao tuoan te network bwa e mano ni katoa 3 te namwakaina.
Bwaai aika a kainnanoaki iaan Karinan 2
Taan bitineti aika a roko mwaitin aia kabobwai n 1 te mirion nakon 6 te mirion n teuana te ririki
Kakoauan bwaai aika a kainnanoaki iaan Karinan 2
Karaon te Self Assessment Questionnaire ni katoa ririki
Karaoan te Tutuo iroun te Approved Scanning Vendor (ASV) ni katoa 3 te namwakaina
Bwaai aika a kainnanoaki iaan Karinan 3
Taan bitineti aika a roko mwaitin aia kabobwai n 20 te ngaa nakon 1 te mirion n teuana te payment brand (te kambwana ni card)
Kakoauan bwaai aika a kainnanoaki iaan Karinan 3
Karaoan te Tutuo iroun te Approved Scanning Vendor (ASV) ni katoa 3 te namwakaina
Karaon te Self Assessment Questionnaire ni katoa ririki
Bwaai aika a kainnanoaki iaan Karinan 4
Taan bitineti aika a roko mwaitin aia kabobwai online n 20 te ngaa ke e nakon 1 te mirion mwaitin aia kabobwai ae e aki online n teuana te payment brand.
Kakoauan bwaai aika a kainnanoaki iaan Karinan 4
Karaon te Self Assessment Questionnaire ni katoa ririki
Karaoan te Tutuo iroun te Approved Scanning Vendor (ASV) ni katoa 3 te namwakaina (e kona ni kaungaaki ke ni kainnanoaki, ma e a nakon ana kainibaire te bangke)
Taian website aika a mano
Katauraoan te website ae mano ibukin te bobwai e na bon buoka kamanoaia taan bobwai ao karauan nanoia. Angiia aomata aika a kabooi bwaai ke mwakuri (service) online, a ataa ngkai kakawakin kanikinaean te roka n te browser window frame, ae e oti ngkana a kataia n log in ke n register – ao e moanaki te address ma ‘htps://’.
E oti ikai bwa iai ana digital certificate am bitineti are e a tia ni karaoaki iroun te rabwata riki teuana ae e onimaki, n aron VeriSign ke Thawte, ae e kaotia bwa te rongorongo are e a tia n butinako online man am website e a tia ni kamanoaki bwa e na aki kona n iraeaki irouia rabwata riki tabeua, man kabonganakin te SSL technology (nora kabwarabwarana i nano).
Ko kona naba ni karekea te Extended Validation (ke te eEV-SSL) certificate, ae e kaotia bwa e a tia te rabwata are e kariakaki n anga te certificate ni karaua raoi n tuoa am bitineti.
SSL
Te SSL (Secure Sockers Layer) bon te rabakau ae e mano raoi man kinaaki ibukin kamanoan te toma i marenan te server ao te client – titebo ma te web server (website) ao te browser (ibukin kakaean rongorongo), ke te mail server ao te mail client n ai aron te Microsoft Outlook.
Te SSL e kamanoi ao n kawakin raoi bwaai aika a kakawaki n aron nambwan te credit card, nambwan te social security ao rongorongon te login ngkana a kabonganaki online. N aron ae e ataaki, e kanakoaki te data i marenan taian browser ao taian web server, n te koroboki ae e matata …ngaia are a kona n nooraki. Ngkana e kunei te tia ioawa taian data aika a kabonganaki i marenan te browser ao te web server aikai, ao e na bon kona n reke irouna ao ni kabongana.