In today's world, it is an unfortunate reality that safety and security are never guaranteed no matter how vigilant our efforts. Those of us in the payments industry are well versed in security measures due in large part to the Payment Card Industry Data Security Standard (PCI DSS), which sets forth guidelines for all aspects of safeguarding sensitive data, including the physical locations where such data may reside.
The PCI DSS is detailed in full by the PCI Security Standards Council at www.pcisecuritystandards.org. Our archives also contain numerous articles on the PCI Security Standards going back more than 10 years. I'm not going to delve into the particulars of the standards right now. I just want to share some thoughts about maintaining physical security, because when physical security is faulty, protecting data can easily become irrelevant.
Next time you look for office space, here are some tips to get situated in the right place the right way:
Before you invite a new person to join your staff, find out as much as you can about the person's background. During an interview, a potential hire can be charming and seem highly qualified. However, sometimes appearances can be deceiving.
So don't jump to hire someone who has impressed you; do your due diligence first. Here are three steps to take:
With staff in place, then it's time to train them thoroughly on your security practices, and allow access to sensitive data and your financial records only to staff members who require it to fulfill their job duties.
And if you don't have a security system, install one – and make sure it's one that notifies police about potential intruders. We can't rid the world of criminals, but we can take steps to make our exposure to them close to nil.
The Green Sheet Inc. is now a proud affiliate of Bankcard Life, a premier community that provides industry-leading training and resources for payment professionals. Click here for more information.
Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.
Prev Next