Page 12 - GS170302

News

cussing a cyber incident that occurred approximately two Mastercard, Oracle expand
fone is aware of several news reports issued today dis-

months ago," Verifone spokesman Andy Payment said in a
March 7 statement. "We are providing information to help cross-channel initiative
address questions that may arise as a result of these stories."

Additionally, Payment stated that the incident has been astercard disclosed in late February 2017 that
contained, the attack was limited in scope, Verifone has it will continue a joint initiative with Oracle,
strengthened its security, no immediate effects of the attack following a successful UK pilot in 2016. The
have been reported and Verifone maintains a positive M companies expect their combined, multilay-
outlook. ered technologies will help merchants improve payments
security and customer reach, representatives stated.
Beyond firewalls
"With close to 80 percent of consumers using technology
Recent attacks against government and private at some point along their shopping journey, Mastercard is
infrastructure, combined with increasingly virtual committed to unlocking omni-channel commerce for every
workplaces, reflect the need for enhanced protections and device and delivering convenient experiences to users at-
managed permission levels to mitigate risk and protect home, in-stores and on-the-go," said Chris Fendley, Senior
business owners and consumers. Growing adoption of Vice President, Merchant Development, at Mastercard.
cloud and mobile technologies inspired Google to launch "Building on the success of our joint initiatives with Oracle
BeyondCorp, a security initiative designed to go beyond in the UK, we can help retailers and hospitality providers
the firewalls and perimeters of corporate networks by connect with their customers in more engaging ways while
protecting employees, contractors and vendors wherever enabling them to grow their businesses with scale, speed
they happen to be working. and security."

Heather Adkins, Director of Information Security and John Wethington, Chief Executive Officer of Austin,Texas-
Privacy, and Rory Ward, Site Reliability Engineering based MySensitiveData.com Inc., said, "It's interesting
Manager at Google, shared insights and lessons learned that the Mastercard and Oracle collaboration is coming
at the 2017 RSA Conference. They designed BeyondCorp's on the heels of Oracle's data breach. POS has always been
framework around users, devices and levels of trust and an Achilles' heel, whether it's in-store skimming or online
access. This enabled them to track users and devices hacking. Oracle needed a strong partner to help them
throughout their lifecycles at the company, while assigning improve and enhance product security."
appropriate levels of trust and access. For example, a
desktop computer could be fully trusted, while a tablet In-store, online, cross-channel
is half-trusted and a phone is an untrusted or low-trust
device, Adkins said. The partnering companies will initially focus on in-store
payments, as well as digital and cross-channel integration to
Migrating tens of thousands of Googlers and vendors enable merchants to transact with customers wherever they
was almost as difficult as inventing the technology, Ward shop. Company sources stated these combined capabilities
added. The company built a migration pipeline and looked and global footprints will simplify and accelerate worldwide
at all the data, directing qualified data to the new network adoption of omnichannel technologies.
and leaving disqualified data on the old network. Then
Google's team would identify the most egregious use cases, Oracle and Mastercard garnered positive reviews from
fix it and do it again, Adkins said. early pilots at wagamama, Carluccio's, Young & Co.'s
Brewery and Geronimo Pubs. Phase 2 of the roll out will
After implementing the program, Adkins and Ward offered include strategies that address the in-store experience,
the following advice: have zero trust in your network, base operational efficiencies and cross-channel consistency, the
all access decisions on what you know about users and companies noted.
devices, and migrate carefully and try to avoid "breaking" Continued expansion, consolidation
existing users.
At the 2017 Mobile World Congress in Barcelona, Mastercard
"BeyondCorp isn't a product, project, or company – it's a revealed plans to continue rolling out the company's Qkr!
set of guiding principles that spans the people, process, mobile app in Brazil, Canada, Ireland, Singapore, South
and technology within an organization," Google stated on Africa and the United States in 2017. Consumers can use the
the BeyondCorp website. "You don't have to be Google, or mobile app in a variety of venues, including gas stations,
operate at Google scale, to benefit from the patterns behind parking, sports arenas, and unattended retail, the company
BeyondCorp – you just have to be willing to move past stated.
legacy thinking."
"Consumers are demanding more security and convenience,"
Wethington said. "There isn't a day that goes by without a

12