|
|
Midsized Ecommerce firms and online retailers of varying tiers have a lot to manage these days, especially with regards to things like online security, consumer privacy and PCI compliance. Security deployments vary greatly for Ecommerce agents and their online selling customers. ShopVisible will below present three options for Ecommerce providers in their attempts at becoming PCI compliant on a high level and more imperative for many e-tailers, establishing strident security protocols and procedures either developed in house or from a 3rd party.
Concerns for choosing a security solution can vary dramatically depending on the organizational elements of the company such as size, revenue and client base, staffing, security expertise, solution deployment alacrity and ease/comfort with outsourcing items versus internally configuring them. With cloud based security solutions reaching their decade anniversary; many Ecommerce and security experts are going with Software as a Service tools while others opt for on-site solutions and hybrid models.
SaaS Ecommerce providers can equip eMerchants with a nearly hands-free approach to online security. Often meant for companies seeking out a "low initial purchase price, a reduced investment in IT, simpler deployments, and quicker upgrades...[SaaS based deployments are] ideal for companies with limited IT staffing and a less technical business focus, including retail services and health care," notes McAfee in its solution brief. Organizations searching for a software as a service solution may have fewer IT resources or time to manage large scale security projects. Support and management are often critical undertakings here and can be indeed a vast challenge for small teams with diverse foci. The initial start-up cost are often lower than other avenues for security as annual subscriptions are typically licensed and no on-site hardware is managed. This permits for off-site vulnerability scanning and penetration testing to remain compliant with processes like PCI DSS...
On-site security solution controls can be more malleable and offer more hands-on direction for an company. These often are associated with higher upfront costs and will require a bit more time to maintain and manage. They do however provide greater levels of security customization depending on the organizational needs. If a complex business and security infrastructure exists, one oin which data servers and mail servers are stored on the premises, a robust IT team is employed etc..., then on-site controls may be useful. This model can be more adaptable to changing and growing business needs for eample, in July 2010, when PCI will demand of its compliant supporters, a higher degree of payment card data protection.
Hybrid security models in Ecommerce can be best utilized to achieve "maximum flexibility, cost management, and compliance..." notes McAfee. A confluence of on-site measures and off-site data storage can be manipulated here to better support growing companies with expanding data needs. For example, in the case of ShopVisible, whose data centers are present in production, development and backup realms, coexists simultaneously in 2 countries and in 3 regions. Targeted PCI practices like intrusion protection (IPS) and intrusion detection (IDS) are coupled with the off-site penetration test via a hardware box installed in the data center. Blending data storage protection and internally wrought security protocols makes for a seamless and manageable Ecommerce solution.
ShopVisible is an Atlana, GA based Ecommerce solution provider located @ 1095 Zonolite Road, 30306.
|
Currently rated 0 by 0 people
|
|
|
|
|
Subscribe:
Email  |
RSS 
|
