PoS systems continue to be targeted by cybercriminals for card payment information as well as personally identifiable information. Even as organizations solidify their PoS security, cybercriminals evolve. This presentation examines the State of PoS Insecurity. Read this to learn: -Why situational awareness of your POS risks is a must -Insights on the latest and trending POS cyber risks and impacts -Fundamental security recommendations from SurfWatch Analysts

1. Point-of-Sale is Point-of-(In)Security:
The Threat to Your Business
Is Bigger Than You Imagine

2. Today’s Speaker
2
Jason Polancich
Founder & Chief
Architect
SurfWatch Labs

3. Personalized Cyber Risk
Intelligence for Your Business
3
We Start Where Traditional Threat Intelligence Stops
•Powerful cyber risk analytics and practical BI apps that link strategic
cybersecurity insights to your key business operations

4. The POS Security Problem
• Easy, Low-Hanging Fruit
for Cybercriminals
– Point-of-Sale Systems
process sensitive payment
and PII
– PCI Compliance Has Little
Bearing on Your Risk
– Many Outdated Systems
• This is Not Just a Technical
Problem… It’s a REAL
Business Problem
4

5. 5
What Does the Data Show?

6. 6
What Does the Data Show?

7. 7
What Does the Data Show?

8. 8
POS is the Gateway Hack

9. 9

10. 10

11. Turn Dark Cyber Activity into
Intelligence You Can Use
11

12. The Butterfly Effect
12
• As defenses evolve, so too
do cybercriminals!
• Beyond credit card info,
POS attacks use stolen PII
info in other ways:
– Identity Theft
– Phishing
– Man-in-the-middle attacks
– Shutting down technical
infrastructure
– And more…

13. Eliminate Your Blind Spots with
Situational Awareness
13

14. Establish a Threat Intelligence Program
for 360° View of Your Cyber Risk
14
Collect and Analyze
Threat Intelligence from
Inside and Outside Your
Company Walls

15. 5 Building Blocks to
Reduce Your POS Risk
After you gain Situational Awareness
you can build out key security tactics:
1.Establish a repeatable vulnerability
management process based on your risk and
exposure
2.Deploy robust identity authentication,
authorization and accounting
3.Leverage data encryption AND data
tokenization
4.Segment your network zones
5.Look to Critical Controls and OWASP as
additional checks
15

16. SurfWatch Labs Resources
16
• Download Our Special Report on
POS Insecurity: Cyber Risk Trends and Analysis
http://info.surfwatchlabs.com/POS-Cyber-Report
• Learn About SurfWatch C-Suite:
• Product Overview:
https://www.surfwatchlabs.com/apps/c-suite
• Product Review by SC Mag: http://www.scmagazine.com/surfwatch-c-
suite/review/4324/
• Schedule Your Personalized Demonstration
http://info.surfwatchlabs.com/request-demo

17. Thank You!
www.surfwatchlabs.com
Follow us at: