Affinion Secuirty Center - BreachShield Overview


Published on

Overview of Affinion Secuirty Center's Data Breach Response Management Solution - BreachShield

  • Be the first to comment

  • Be the first to like this

Affinion Secuirty Center - BreachShield Overview

  1. 1. BreachShield Overview Chris Haynor Vice President Affinion Security Center
  2. 2. Affinion Security Center’s Expertise <ul><li>A leading provider of identity theft solutions worldwide </li></ul><ul><ul><li>Currently serving 10 million+ individuals </li></ul></ul><ul><ul><li>Over 100 custom or branded programs managed for many of the world’s leading financial institutions </li></ul></ul><ul><li>Dedicated research & development team committed to staying ahead of the identity theft curve </li></ul><ul><ul><li>Hot-Line first offered in 1969 </li></ul></ul><ul><ul><li>One of the first to market with credit monitoring services (PrivacyGuard - 1992) </li></ul></ul><ul><ul><li>Card Cops acquired in 2007 </li></ul></ul><ul><ul><li>Recent innovations include launch of IdentitySecure and BreachShield </li></ul></ul><ul><ul><li>ID theft and privacy expert Frank Abagnale serves as product advisor and spokesman </li></ul></ul><ul><li>Committed to the highest security and operational standards </li></ul><ul><ul><li>Process over 150 million transactions/year through variety of payment processors and direct relationships </li></ul></ul><ul><ul><li>ISO 27001 certified (one of only 85 US companies to earn this credential) </li></ul></ul><ul><ul><li>PCI Level 1 compliant </li></ul></ul><ul><ul><li>Six Sigma trained experts </li></ul></ul><ul><li>Addressing the growing threat of data breaches by leveraging ASC’s infrastructure </li></ul>Strategic solutions for personal data security
  3. 3. ASC Is Backed By The Strength of Affinion Group <ul><li>35 years of experience in creating, executing, and refining customer engagement solutions </li></ul><ul><li>Owned by Apollo, LLC - top five investment fund </li></ul><ul><li>$1.4 billion of revenue / $300MM+ in EBITDA </li></ul><ul><li>Ranked among the largest private companies in Forbes’ Annual Listing </li></ul><ul><li>5,500 clients, including many of the largest brands worldwide </li></ul><ul><li>150 million consumers enrolled in our programs </li></ul><ul><li>Global organization – U.S and international operations in 14 countries </li></ul>
  4. 4. Data Breaches – A Complex, High-Stakes Environment <ul><li>Breaches Continue To Rise </li></ul><ul><li>According to the Identity Theft Resource Center, breaches increased by 47% in 2008 </li></ul><ul><li>Complexities of the crime continue to change </li></ul><ul><li>Legislative Environment Increasingly Complex </li></ul><ul><li>Breach notification laws now in 44 states </li></ul><ul><li>Emerging trend of state laws require that all businesses encrypt personally identifiable information </li></ul><ul><ul><li>Additional Federal legislation proposed </li></ul></ul><ul><li>Federal Trade Commission’s Red Flag rules </li></ul>“ If a company or institution that experienced a data breach of your personal information offered you an identity protection service, would you most prefer a service that…”* * Javelin Strategy & Research on Data Breach Notification – June 2008
  5. 5. We provide turn-key, end-to-end solutions by leveraging the expertise and infrastructure of a $1.4 billion organization. BreachShield – Comprehensive Solutions & Advanced Protection <ul><li>Incident Response Consulting </li></ul><ul><ul><li>Pre-contract and proactively prepare response plans </li></ul></ul><ul><li>List Services </li></ul><ul><ul><li>Our database services include address hygiene and NCOA services, ensuring USPS compliance, optimizing mailing and postal costs and minimizing undeliverable mail </li></ul></ul><ul><li>Notification Drafting & Print Services </li></ul><ul><ul><li>Leverage our capabilities as one of the nation’s largest direct mailers </li></ul></ul><ul><li>Customer Support </li></ul><ul><ul><li>Pre-enrollment: VRU minimizes costs and mitigates poor customer experience from increased call volumes </li></ul></ul><ul><ul><li>Includes FAQ Support </li></ul></ul><ul><ul><li>Post-enrollments: tenured, FCRA-certified Identity Fraud Support Specialists dedicated to each case until resolved </li></ul></ul><ul><li>ID Theft Protection Solutions </li></ul><ul><ul><li>Our data breach solutions utilize the latest ID theft protection technologies available through ASC </li></ul></ul><ul><li>Multi-Channel Enrollment Options – Ensure the affected population can enroll quickly, easily and conveniently </li></ul><ul><ul><li>Full File Enrollment </li></ul></ul><ul><ul><ul><li>Simply provide an encrypted file of all records </li></ul></ul></ul><ul><ul><li>Online </li></ul></ul><ul><ul><ul><li>Allows instant enrollment through a dedicated URL </li></ul></ul></ul><ul><ul><li>USPS </li></ul></ul><ul><ul><ul><li>Customers fill out and return the supplied enrollment form </li></ul></ul></ul><ul><ul><li>Telephone – VRU with Live Agent Option </li></ul></ul><ul><ul><ul><li>Customers enroll with the numeric activation code provided in the Notification Letter </li></ul></ul></ul><ul><li>Ongoing Support & Reporting </li></ul><ul><ul><li>Our team is always available to assist with your needs and can support standard or ‘a la carte’ requests </li></ul></ul>Incident Response Consulting List Services (Deduping & NCOA) Customer Support (Pre & Post Enrollment) ID Theft Protection Solutions Multi-Channel Enrollment Options Ongoing Support & Reporting Notification Drafting & Print Services
  6. 6. ID Theft - Complicated Crimes Demanding a Complete Solution PREVENTION Best-in class technology, proactively combating emerging identity theft threats DETECTION Solutions to quickly identify instances where identity theft has occurred RESOLUTION The right resources to help customers restore their good name <ul><li>New account fraud only 28% of ID theft instances </li></ul><ul><li>Need solution that addresses all aspects of ID theft </li></ul><ul><li>BreachShield is committed to providing the most robust & comprehensive solutions </li></ul>
  7. 7. BreachShield Offers the Most Complete Protection Available <ul><li>PREVENTION </li></ul><ul><ul><li>CardCops Internet Surveillance: CardCops uses a proprietary search bot (robot technology that searches data sources for specified information) to prevent Internet fraud. CardCops monitors channels in Cyberspace in real time, 24/7. Service delivers an immediate e-mail or TXT/SMS alert if any of his/her monitored information appears to be compromised. </li></ul></ul><ul><ul><li>Credit Card Registry Service (Lost/Stolen Service): Centralize and store information from credit, bank, department store and oil company cards in a single secure location. Should these items ever get lost or be stolen, members can cancel these cards and request replacements -- all with one toll-free phone call. </li></ul></ul><ul><ul><li>Fraud Assist Toolbox: This convenient, online tool helps streamline the identity theft prevention and recovery process. Members can choose to set fraud alerts, stop pre-approved credit offers, and stop unwanted telemarketing calls. </li></ul></ul><ul><li>DETECTION </li></ul><ul><ul><li>Credit Monitoring and Alerts: Monitoring for changes to an individual’s credit records with one or all of the national credit reporting agencies. Members will be notified of any changes to their records on file with that agency. Those changes could include new accounts opened or a change in credit score. </li></ul></ul><ul><ul><li>Credit Reports and Scores: Members receive current Credit Reports and Credit Scores from one or all three major credit reporting agencies. Members also receive a comprehensive analysis, detailing which factors impact their rating. </li></ul></ul><ul><ul><li>Credit Information Hotline: Toll-free hotline with FCRA-trained representatives. Not only can these highly trained experts walk members through their credit reports, they can also answer any questions about credit records or alerts received. </li></ul></ul><ul><li>RESOLUTION </li></ul><ul><ul><li>Identity Fraud Support Services (IFSS): All customers enrolled will have access to certified and dedicated ID theft caseworkers who help members resolve all aspects identity fraud or theft. </li></ul></ul><ul><ul><li>ID Theft Insurance: ID Theft Insurance of up to $25,000 is available. </li></ul></ul>Selecting the right identity theft protection to offer is critical to the affected individuals, and can help safeguard your organization’s reputation and manage risk
  8. 8. BreachShield Case Studies <ul><li>Our Experience: </li></ul><ul><li>In late 2008 BreachShield services were deployed for a breach of a major financial institution, impacting a population of 4.5 million. </li></ul><ul><li>Utilizing our complete, end to end solution, we saved the financial institution time and money, while preventing additional exposure and customer noise </li></ul><ul><li>List Services </li></ul><ul><ul><li>After a major consulting and auditing firm hired to do 'forensics' on the 60+ impacted databases spent weeks working on record cleansing, BreachShield stepped in </li></ul></ul><ul><ul><li>Our team of database experts was able to scrub the files within 72 hours </li></ul></ul><ul><ul><li>In the client’s words, we “ made the auditor look bad, and performed the job for a lot less money‘ </li></ul></ul><ul><ul><li>Using our NCOA and de-duping capabilities, we reduced the mailing cost to 1/4 of the amount initially expected </li></ul></ul><ul><li>Contact Center </li></ul><ul><ul><li>To ensure an optimal customer experience and preserve SLA levels while managing increased call center volumes, BreachShield utilized both VRU and live agent options </li></ul></ul><ul><ul><li>40% of callers opted for the VRU, minimizing the financial impact to the client </li></ul></ul>BreachShield has handled more than 170 breaches to date, offering its services to millions of impacted individuals <ul><li>Our Expertise: </li></ul><ul><li>In 2008, a client had a breach that impacted over 500K individuals. The client notified the population, but did not want to offer ID theft protection, despite BreachShield’s recommendation. </li></ul><ul><li>Facing media and legal pressures, the client decided to post an optional id theft protection service on their website and to irate individuals who called into their call center. </li></ul><ul><li>Less than a year later, the client faces a class-action lawsuit. A major settlement component is offering one or two years of ID theft protection service to the impacted population, with costs likely to be much greater than BreachShield’s initial recommendations </li></ul><ul><li>Proactively developing a response plan and offering an ID theft solution could have: </li></ul><ul><ul><li>Conveyed a pro-active image, protecting their brand from negative impacts </li></ul></ul><ul><ul><li>Significantly reduced costs </li></ul></ul><ul><ul><li>Provided a robust solution to the affected population </li></ul></ul><ul><ul><li>Potentially avoided a class-action law suit </li></ul></ul>
  9. 9. <ul><li>Proven History & Expertise: ASC provides its solutions to over 10 million individuals today, and services major financial institutions and top corporations. </li></ul><ul><li>Comprehensive End-to-End Solution: We can help with all aspects of data breach response, leveraging the back-end capabilities of a $1.4 billion organization </li></ul><ul><li>Advanced ID Theft Protection: Our services utilize proprietary technologies and offer the most complete protection available, with tools for preventing, detecting and resolving ID theft </li></ul><ul><li>Highest Security Standards: Ongoing commitment to data security – ISO 27001 & PCI Level 1 compliance </li></ul><ul><li>24/7 Availability: Available to take your call about a breach within your organization anytime, day or night </li></ul><ul><li>Speed to Launch: ASC BreachShield solutions can be deployed as quickly as 24 hours from time of request, demonstrating to your customers that you take the security of their personal data seriously </li></ul>Why Partner with ASC BreachShield? <ul><li>Customer Service: Exceptional call center expertise from over 35 years of experience </li></ul><ul><li>Notification & Fulfillment Services: We can consult on or draft the Notification Letter. Our state of the art production center allows us to print and mail Notification Letters </li></ul><ul><li>Trusted Provider: BreachShield solutions are powered by PrivacyGuard, the nation’s leading ID theft solution, and the only service endorsed by leading ID theft expert, Frank Abagnale </li></ul>The only provider to offer comprehensive, turn-key solutions combined with advanced ID theft protection and world class customer service
  10. 10. Contact Us <ul><li>For 24/7 assistance in the event of a breach, call BreachShield toll-free: </li></ul><ul><li>1-800-350-7209 </li></ul><ul><li>For general inquiry, call or email: </li></ul><ul><li>Chris Haynor </li></ul><ul><li>203-956-1103 </li></ul><ul><li>[email_address] </li></ul><ul><li>Helen Boyian Mike Morelli </li></ul><ul><li>203-956-8926 203-956-1078 </li></ul><ul><li>[email_address] [email_address] </li></ul>