Visa Inc. · NYSE:V
Visa — 2015 Visa Payment Security Symposium
19 slides from Visa's conference presentation, August 2015
Slide 1: 2015 Visa Payment Security Symposium Webinar
2015 Visa Payment Security Symposium The Power of Partnership AUGUST 12-13 | HYATT REGENCY | BURLINGAME, CA 2015 Visa Payment Security Symposium Webinar Diana Greenhaw – Sr. Director, Global Data Security and Third Party Risk Lester Chan – Director, North America Merchant Security
Slide 2: Forward-Looking Statements
2015 Visa Payment Security Symposium Forward-Looking Statements The materials, presentations and discussions during this meeting contain forward-looking statements within the meaning of the U.S. Private Securities Litigation Reform Act of 1995. These statements can be identified by the terms “will,”
Slide 3: Notice of Disclaimer
2015 Visa Payment Security Symposium Notice of Disclaimer The information, recommendations or “best practices” contained herein are provided "AS IS" and intended for informational purposes only and should not be relied upon for operational, marketing, legal, technical, tax, financial or other advice
Slide 4: Day 1 – General Session
Day 1 – General Session Diana Greenhaw – Sr. Director, Global Data Security and Third Party Risk Visa Public
Slide 5: Event Summary
2015 Visa Payment Security Symposium Event Summary • Almost 400 participants from processors, third party agents, acquirers, merchants and event sponsors • More than 40 industry expert panelists and speakers, including: – Ellen Richey, Vice Chairman – Risk and Public Policy, Visa Inc. – Mahesh Adity
Slide 6: The Power of Partnership: Securing the Future of Commerce Together
2015 Visa Payment Security Symposium The Power of Partnership: Securing the Future of Commerce Together • Partners play a strategic role in securing the payment system • Increasing involvement of non-traditional stakeholders and emerging technology organizations in payments • Critical to maintain tr
Slide 7: After the Compromise: Lessons Learned
2015 Visa Payment Security Symposium After the Compromise: Lessons Learned • Communication – at all levels – is key to successful incident management and resolution • Organizations must understand the difference between the annual PCI DSS validation exercise and maintaining ongoing enterprise-wide d
Slide 8: Managing Risk with Secure Technology
2015 Visa Payment Security Symposium Managing Risk with Secure Technology • The future of payment system security is data devaluation • Several technologies include inherent security features: – EMV Chip – Point-to-Point Encryption – Tokenization • Organizations must use the solution that works best
Slide 9: U.S. EMV Migration Update
2015 Visa Payment Security Symposium U.S. EMV Migration Update • U.S. EMV counterfeit liability shift – October 2015 • Liability shift date is not the finish line, but a starting point • Multi-layered security approach provides best protection payment system stakeholders and downstream customers • 1
Slide 10: Cyber Security Threats and Mitigation Strategies
2015 Visa Payment Security Symposium Cyber Security Threats and Mitigation Strategies • Security Metrics performed a “live” hacking demonstration illustrating how quickly hackers can access insecure systems to obtain cardholder data • Criminals are shifting their attack methods and targets – the pat
Slide 11: Data Security Regulatory Activity is Increasing
2015 Visa Payment Security Symposium Data Security Regulatory Activity is Increasing • In 2013, President Obama issued an Executive order directing the federal government to take steps to protect the nation’s critical infrastructure from cyber threats • In 2015, the FFIEC issued its cybersecurity as
Slide 12: Day 2 – Breakout Sessions
Day 2 – Breakout Sessions Lester Chan – Director, North America Merchant Security Visa Public
Slide 13: Malware POS Session Recap
2015 Visa Payment Security Symposium Malware POS Session Recap How POS Malware continues to proliferate and evolve with Palo Alto Networks • Malware continues to be play a significant role in payment card breaches • Four different malware type: file scraper, network sniffer, keylogger, and memory sc
Slide 14: Incident Response Planning Session Recap
2015 Visa Payment Security Symposium Incident Response Planning Session Recap Incident response planning from Facebook • Hire smart people and provide them tools to do their job • Security incident plans should be small and flexible • Sometimes only a limited amount of information is available • Sec
Slide 15: Network Segmentation & Zero Trust Session Recap
2015 Visa Payment Security Symposium Network Segmentation & Zero Trust Session Recap Benefits of next-gen firewalls and the Zero Trust principle with Palo Alto Networks • Today’s networks are extremely challenging with various devices and data • Controlling the conversations and conversants make it
Slide 16: Securing the Payment Value Chain Session Recap
2015 Visa Payment Security Symposium Securing the Payment Value Chain Session Recap Discussing the hyperconnected value chain • As the payment industry continues to evolve, the payment value chain is becoming more and more decentralized and it is no longer a simple 4 party model • Hyper connectivity
Slide 17: Global Brand Protection – Global Acquirer Risk
2015 Visa Payment Security Symposium Global Brand Protection – Global Acquirer Risk Managing Online Pharmaceutical and Nutraceutical Merchants • Acquirers must attain the pharmacy’s valid and verified licenses for each jurisdiction where the merchant offers to ship prescription medication • Be wary
Slide 18: Third Party Agent Program Updates
2015 Visa Payment Security Symposium Third Party Agent Program Updates • Criminals are sophisticated, but they are using the same attack vectors • Post EMV, criminals may target aggregation points or entities with large amounts of data such as payment facilitators, processors, and gateways • The Vis
Slide 19: Upcoming Events and Resources
Upcoming Events and Resources Upcoming Webinars – Under Merchant Resources/Training on www.visa.com • The Importance of Containment and Remediation of Compromised Payment Processing Environments, September 2, 2015 Visa Online Merchant Tool Kit provides helpful information to make a seamless EMV tran