Secure Zone and High Availability Bruce R. Lewis Director, Development, Product and Quality Assurance Club Solutions from Fiserv

Consumer Confidence in Data Security Is Low 8.1 million consumers were victims of identity fraud in 2007 50 percent of consumers directly blame the merchant for criminal activity associated with their credit and financial information Three out of four consumers say they will stop purchasing from a merchant where breach occurred Sources: “2008 Identity Fraud Survey Report“, Javelin Strategy & Research, February, 2008. Data Breaches and Buyer Behavior: Moving PCI Compliance from Costly Burden to Competitive Advantage”, Javelin Strategy & Research, March, 2007

8.1 million consumers were victims of identity fraud in 2007

50 percent of consumers directly blame the merchant for criminal activity associated with their credit and financial information

Three out of four consumers say they will stop purchasing from a merchant where breach occurred

Areas of Concern The health and fitness industry risks are: Paper Storage Transmission Physical building access

The health and fitness industry risks are:

Paper

Storage

Transmission

Physical building access

Typical Sensitive Data Pathway

Reduce Confidential Information “Touch Points” Reduce employees ability to touch/see confidential member information Understand the liabilities involved when you transmit your files File transmissions Liability and accountability State legislation “ Court of public opinion”/company image Utilize today’s technology to decrease your risk

Reduce employees ability to touch/see confidential member information

Understand the liabilities involved when you transmit your files

File transmissions

Liability and accountability

State legislation

“ Court of public opinion”/company image

Utilize today’s technology to decrease your risk

Goal: Secure The Transaction Through The Entire Process

High Availability The secure transaction process will not work without high availability Definition High availability is a system design protocol and associated implementation that ensures a certain absolute degree of operational continuity. Availability refers to the ability of the user community to access the system, whether to submit new work, update or alter existing work, or collect the results of previous work. If a user cannot access the system, it is said to be unavailable . (Source: Wikipedia)

The secure transaction process will not work without high availability

Definition

High availability is a system design protocol and associated implementation that ensures a certain absolute degree of operational continuity.

Availability refers to the ability of the user community to access the system, whether to submit new work, update or alter existing work, or collect the results of previous work. If a user cannot access the system, it is said to be unavailable .

(Source: Wikipedia)

Why Should You Care? Without failover capabilities, the best software in the world is rendered useless Simple back-ups are not enough, these systems take time to restore How much money would you lose per minute if your system was not available? Front desk check in Point of sale transactions Back office accounting, etc.

Without failover capabilities, the best software in the world is rendered useless

Simple back-ups are not enough, these systems take time to restore

How much money would you lose per minute if your system was not available?

Front desk check in

Point of sale transactions

Back office accounting, etc.