<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blog Central &#187; eCommerce</title>
	<atom:link href="http://blogs.mcafee.com/consumer/ecommerce/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com</link>
	<description></description>
	<lastBuildDate>Tue, 21 May 2013 16:58:41 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>Three Key Takeaways from the 2013 Verizon Data Breach Report</title>
		<link>http://blogs.mcafee.com/ecommerce/three-key-takeaways-from-the-2013-verizon-data-breach-report</link>
		<comments>http://blogs.mcafee.com/ecommerce/three-key-takeaways-from-the-2013-verizon-data-breach-report#comments</comments>
		<pubDate>Mon, 13 May 2013 15:00:16 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[PCI Compliance]]></category>
		<category><![CDATA[Small Business]]></category>
		<category><![CDATA[Verizon DBIR]]></category>
		<category><![CDATA[web security]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=24673</guid>
		<description><![CDATA[It’s that time again, where we look back at the year passed and assess how the threat landscape has changed—for better and for worse. The 2013 Verizon Data Breach Investigations Report (DBIR) reveals that last year was not only defined by the varied nature of cyberattacks, but also by the increased frequency of these incidents in general. <a href="http://blogs.mcafee.com/ecommerce/three-key-takeaways-from-the-2013-verizon-data-breach-report">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>It’s that time again, where we look back at the year passed and assess how the threat landscape has changed—for better and for worse. The <a href="http://www.verizonenterprise.com/DBIR/2013/">2013 Verizon Data Breach Investigations Report</a> (DBIR) reveals that last year was not only defined by the varied nature of cyberattacks, but also by the increased frequency of these incidents in general. Perhaps more so than any other year, “it will happen to you” was certainly the overarching theme. From tech giants to mom-and-pop storefronts, few organizations seemed immune to web-based threats.</p>
<p>However, despite this doomsday-esq verdict, there is light at the end of the tunnel. Websites are <a href="http://www.darkreading.com/vulnerability/websites-harbor-fewer-flaws-but-most-hav/240154118">reducing</a> their overall vulnerabilities, meaning education and better security practices are having an impact. But, as the digital landscape continues to expand, there are still many more valuable lessons that businesses small and large must learn in order to stay one step ahead of cybercriminals.</p>
<p>Below, we highlight some key takeaways from this year’s DBIR and discuss what they mean for your online business.</p>
<p><b>1. Protect Your Passwords</b></p>
<p>For businesses and consumers alike, password safety is a crucial part of keeping sensitive information out of the wrong hands. However, when not implemented properly or poorly protected, passwords can turn into an Achilles heel. According to the 2013 DBIR, <a href="http://www.verizonenterprise.com/DBIR/2013/">76% of network intrusions exploited weak</a> <a href="http://www.verizonenterprise.com/DBIR/2013/">or stolen credentials</a> to get into backend systems.</p>
<p>Implementing password safety and compliance protocols for employees is a crucial part of keeping your site secure. Always use strong password controls for admins, and protect against phishing scams by teaching employees not to share logins as well as enforcing good security practices like no credential reuse. Additionally, changing passwords regularly for important functions will help reduce the damage in the event that one is compromised.</p>
<p><b></b><b>2. Don’t Skimp on Vulnerability Scanning</b></p>
<p>When budgets are tight, security is often one of the first areas to feel cutbacks. However, with <a href="http://www.verizonenterprise.com/DBIR/2013/">66% of breaches taking months or more to discover</a>, vulnerability scanning is one item that should never be axed. The large majority of websites have at least <a href="http://www.ivizsecurity.com/blog/penetration-testing/infographics-web-application-vulnerability-statistics-of-2012/">one serious weakness</a> that, if left unattended, could lead to a security breach. The potential financial implications of these vulnerabilities going unnoticed for any length of time could be extraordinarily costly, if not fatal to some smaller sites.</p>
<p>Implementing a website vulnerability scanning service like the <a href="http://www.mcafeesecure.com/us/">McAfee SECURE™</a> service can help online businesses identify latent threats by scanning daily for thousands of vulnerabilities. Even if you have firewalls and other security measures in place, it’s crucial to frequently check for new threats—before cybercriminals find them first.</p>
<p><b>3. Hackers Follow the Money</b></p>
<p>While this many not seem like any great revelation, the fact that <a href="http://www.verizonenterprise.com/DBIR/2013/">the overwhelming majority (75%) of breaches were driven by financial motives</a> means that any online business, regardless of size, is more of a target than ever. The threat from money-hungry organized criminal groups as well as opportunistic lone hackers continues to grow, putting both individuals and businesses at risk.</p>
<p>The financial incentive has made online retailers especially tempting targets, with sensitive customer information as well as their own company bank accounts now on cybercriminals’ radar. Additionally, the ongoing <a href="http://www.darkreading.com/privacy/research-small-merchants-dont-believe-pc/231902895">lack of PCI compliance</a> among small to medium sized businesses, has made them even easier to exploit versus their larger, better-protected counterparts.</p>
<p>While no one is ever completely safe from determined hackers, taking the necessary steps to protect your business through strong and varied passwords, vulnerability scanning, and other protocols is an important start. As the sophistication and severity of cyberattacks continue to increase, there is little doubt about the risks of failing to follow appropriate security measures.</p>
<p>Share your thoughts on this topic in the comments below, and be sure to follow us on Twitter at <a href="http://www.twitter.com/mcafeesecure">@McAfeeSECURE</a> for the latest eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/three-key-takeaways-from-the-2013-verizon-data-breach-report/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How Trust Can Increase Sales and Set Your Business Apart</title>
		<link>http://blogs.mcafee.com/ecommerce/how-trust-can-increase-sales-and-set-your-business-apart</link>
		<comments>http://blogs.mcafee.com/ecommerce/how-trust-can-increase-sales-and-set-your-business-apart#comments</comments>
		<pubDate>Tue, 30 Apr 2013 15:00:18 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[case study]]></category>
		<category><![CDATA[sales conversions]]></category>
		<category><![CDATA[web security]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=24306</guid>
		<description><![CDATA[While online-based businesses may not have the long history enjoyed by their brick-and-mortar predecessors, many helped to pioneer the digital shopping experience and make it what it is today. With that goal in mind, eCommerce merchant Batteries4Less.com was one of the first online stores of its kind, a move that has branded them one of <a href="http://blogs.mcafee.com/ecommerce/how-trust-can-increase-sales-and-set-your-business-apart">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>While online-based businesses may not have the long history enjoyed by their brick-and-mortar predecessors, many helped to pioneer the digital shopping experience and make it what it is today. With that goal in mind, eCommerce merchant <a href="http://www.batteries4less.com/">Batteries4Less.com</a> was one of the first online stores of its kind, a move that has branded them one of the premier destinations for high-quality, affordable batteries—a reputation maintained since 1998 through exemplary customer service.</p>
<p><strong>The challenge</strong></p>
<p>Batteries4Less strove to uphold their core values of fast shipping, hassle-free warranties, and 30-day money back guarantee, while at the same time providing the highest quality products possible. However, as the online commerce market expanded, the company realized that they needed to find other ways to differentiate themselves from the ever-growing competition.</p>
<p>As a long time <a href="http://www.mcafee.com/us/mcafeesecure/index.html">McAfee SECURE</a> customer, they were already taking advantage of daily vulnerability scanning and comprehensive security services for their website. But, in an effort to constantly improve visitors’ site experience and remain competitive, the company decided to explore the effectiveness of the McAfee SECURE <a href="http://www.mcafee.com/us/mcafeesecure/products/mcafee-secure.html">trustmark</a> on different pages.</p>
<p><strong>Finding a solution through security</strong></p>
<p>With the help of conversion testing, they discovered that building trust is not only a great way to boost transactions, but also a crucial way to show consumers that they truly care about their entire online experience.</p>
<p><strong>Testing revealed that total sales conversions went up 12 percent and increased new traffic sales by 16 percent</strong> when the McAfee SECURE trustmark was present—highlighting the fact that security can have a huge impact on attracting new site visitors as well as improving a company’s bottom line.</p>
<p>In order to analyze the impact of the trustmark’s presence on generating leads, they enlisted the help of <a href="http://www.conversioniq.com/">ConversionIQ</a>, who specializes in conversion rate optimization and lead generation for eCommerce websites. The testing specialists ran <a href="http://www.mcafee.com/us/resources/case-studies/cs-batteries4less.pdf">multivariate tests</a> for six different scenarios for a period of four weeks to determine the optimal trustmark placement for achieving their objective.</p>
<p>“The McAfee SECURE trustmark is giving us an almost 18 percent lift in sales conversions for 80 percent of the site’s traffic,” said Tony Yorba, President and General Manager at batteries4less.com, “I can’t think of anything else we’ve done that has had even close to that much impact.”</p>
<p><strong>Looking to the future</strong></p>
<p>Batteries4Less continues to adapt their business model to better serve their customers, and uphold those core values of superior product and customer care. Because of the company’s success with their main web property, they have decided to create another retail site, and possibly even more in the future.</p>
<p>For each new endeavor, they will take with them the lessons learned about winning customer trust and loyalty through security, and McAfee is proud to be a part of that process, for Batteries4Less.com and for all our eCommerce customers.</p>
<p>For more information on our customer case studies, visit the McAfee SECURE <a href="http://www.mcafeesecure.com/us/resources/casestudies.jsp">website</a>, and be sure to follow us on Twitter at <a href="http://www.twitter.com/#!/mcafeesecure">@McAfeeSECURE</a> for the latest on eCommerce news, resources and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/how-trust-can-increase-sales-and-set-your-business-apart/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PCI Compliance Best Practices: 3 Areas to Focus On</title>
		<link>http://blogs.mcafee.com/ecommerce/pci-compliance-best-practices-3-areas-to-focus-on</link>
		<comments>http://blogs.mcafee.com/ecommerce/pci-compliance-best-practices-3-areas-to-focus-on#comments</comments>
		<pubDate>Tue, 23 Apr 2013 15:00:44 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[mobile security]]></category>
		<category><![CDATA[PCI Compliance]]></category>
		<category><![CDATA[PCI DSS]]></category>
		<category><![CDATA[website security]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=24102</guid>
		<description><![CDATA[With the PCI DSS 3.0 release only 6 months away, compliance should be on every merchant’s mind. Nevertheless, these regulations often come as an afterthought, especially for Level 3 and Level 4 businesses. As the number of online shoppers continues to grow, there are more and more opportunities for cybercriminals to strike. Increased vigilance on <a href="http://blogs.mcafee.com/ecommerce/pci-compliance-best-practices-3-areas-to-focus-on">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>With the <a href="http://blogs.mcafee.com/ecommerce/pci-dss-3-0-what-merchants-need-to-know">PCI DSS 3.0 release</a> only 6 months away, compliance should be on every merchant’s mind. Nevertheless, these regulations often come as an afterthought, especially for Level 3 and Level 4 businesses. As the number of online shoppers <a href="https://www.internetretailer.com/2012/02/27/e-retail-spending-increase-45-2016">continues to grow</a>, there are more and more opportunities for cybercriminals to strike. Increased vigilance on the merchant’s side will be an integral part of keeping customer financial information out of the wrong hands.</p>
<p>Is PCI compliance the be-all and end-all of safe eCommerce transactions? No, but ensuring that your business follows <b>all </b>regulations can make a huge impact – not to mention that the consequences of not complying are <a href="http://www.csoonline.com/article/730223/little-sympathy-for-merchants-in-disputes-over-pci-violations">so much worse</a>. Today, it is crucial that merchants take compliance seriously to combat new and emerging risks such as those introduced by third-party processors and alternative payments. Additionally, merchants need to be better prepared to tackle the ever-growing list of website vulnerabilities in order to continue to keep customers safe.</p>
<p>So, in anticipation of the 3.0 release, we discuss three key areas that are addressed by the PCI DSS and why they are necessary for keeping your business safe and secure.</p>
<p><b>1. Managing Mobile Commerce</b></p>
<p>Encompassing payments like NFC (Near Field Communications), mobile shopping apps, eWallets, or mobile POS systems, mobile payments present security and compliance issues for merchants and consumers alike. Serious barriers to entry persist around dispute resolution, data security, and privacy, and many shoppers report security as a <a href="http://bgr.com/2011/03/18/secure-mobile-payments-appeal-to-94-of-north-americans/">top concern</a> when completing a transaction via a mobile device.</p>
<p>To combat these worries, the PCI Security Standards Council <a title="PCI Council Releases Mobile Payment Acceptance Guidance  " href="https://www.pcisecuritystandards.org/documents/Mobile_Payment_Security_Guidelines_Merchants_v1.pdf">published a fact sheet</a> in February 2013 with specific steps merchants can take to ensure the security of mobile transactions. Following these guidelines will help merchants implement better mobile payment systems and help customers shop more safely. In tandem with a trusted security provider, this is the best way to embrace mobile payments without sacrificing safety or putting your business’ reputation on the line.</p>
<p>Remember: it doesn’t matter where the financial information was compromised. If it can be traced back to the merchant, they will shoulder the majority of the blame regardless.</p>
<p><b></b><b>2. Payment Processing Pitfalls</b></p>
<p>Payment processing may seem like a daunting task for some merchants, but there are a number of <a href="http://www.websitegeographer.com/ecommerce-payment-gateway/">alternatives</a> to help remove some of this burden. Nevertheless, nothing will completely remove a merchant’s PCI DSS responsibilities. Any merchant who accepts payments inherently accepts all liabilities, and therefore must follow industry standards.</p>
<p>If a third party provides payment processing services or comes into contact with cardholder data at any time, that third party must also ensure that they comply with all relevant PCI requirements. And even if your business has taken the proper steps, you must still make sure that any vendor you work with is compliant as well. Even touch-free transactions completed through PayPal or other eWallets are still subject to data collection legislature and requirements. As a merchant, it is important to request proof of certification from any third party in the form of an <a href="https://usa.visa.com/merchants/risk_management/third-party-registration.html">Attestation Of Compliance (AOC)</a> that ensures those services have been assessed and are PCI compliant.</p>
<p><b></b><b>3. Addressing Security Risks</b></p>
<p>PCI compliance can help avoid some of the most common eCommerce security vulnerabilities. Many security risks merchants face are not new, and it is often <a href="http://www.esecurityplanet.com/network-security/pci-delivers-security-guidance-as-pci-dss-3.0-looms.html">the easy-to-fix exploits</a>—preventable through PCI compliance—that cause the majority of issues.</p>
<p>Most importantly, meeting the quarterly vulnerability scanning requirement will help root out weaknesses before they land your business in the hot seat (or the headlines). Approved Scanning Vendors (ASVs) are security providers that have been validated by the PCI Council to preform vulnerability scans for merchants and other service providers. Currently, there are over 130 ASVs, including McAfee.</p>
<p>By performing these frequent website checks, you can avoid falling victim to issues like:</p>
<ol start="1">
<li>Cross-Site Scripting</li>
<li>Unencrypted Sensitive Forms</li>
<li>SSL/TLS Protocol Initialization-Info Disclosure Vulnerabilities</li>
<li>Improper Error Handling</li>
<li>SSL Self-Signed Certificates</li>
</ol>
<p>&nbsp;</p>
<p>For merchants, PCI compliance must go beyond completing SAQs and checking boxes. If you operate an online business that accepts credit or debit card payments, keeping up with these requirements could mean the difference between success and failure. New vulnerabilities are being discovered all of the time, but by following the PCI DSS, merchants can continue to keep business and customer data safe. The key is to establish efficient, ongoing compliance processes that ideally become part of your business practices in the long run.</p>
<p><b></b><a href="http://www.mcafeesecure.com/us/products/ms-features.jsp">Visit our website</a> for more information on McAfee SECURE services, and be sure to follow us on Twitter at <a href="http://www.twitter.com/#!/mcafeesecure">@McAfeeSECURE</a> for the latest in eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/pci-compliance-best-practices-3-areas-to-focus-on/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PCI Compliance – The Value of Getting Your Business Certified</title>
		<link>http://blogs.mcafee.com/ecommerce/pci-compliance-the-value-of-getting-your-business-certified</link>
		<comments>http://blogs.mcafee.com/ecommerce/pci-compliance-the-value-of-getting-your-business-certified#comments</comments>
		<pubDate>Mon, 15 Apr 2013 15:00:27 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[online security]]></category>
		<category><![CDATA[PCI]]></category>
		<category><![CDATA[PCI Compliance]]></category>
		<category><![CDATA[PCI DSS]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=23967</guid>
		<description><![CDATA[If you operate an online business that accepts credit or debit cards, then you are probably familiar with the Payment Card Industry Data Security Standards (PCI DSS). We’ve discussed the benefits of PCI Compliance before, and it is crucial to ensure that your business becomes and remains in compliance with these requirements. As more and <a href="http://blogs.mcafee.com/ecommerce/pci-compliance-the-value-of-getting-your-business-certified">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>If you operate an online business that accepts credit or debit cards, then you are probably familiar with the Payment Card Industry Data Security Standards (PCI DSS). We’ve discussed the benefits of PCI Compliance <a href="http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide">before</a>, and it is crucial to ensure that your business becomes and remains in compliance with these requirements. As more and more transactions are carried out online, the retail landscape has created an ideal environment for savvy cyber criminals. By following the PCI DSS, you can provide the protection necessary for your customers’ financial security as well as your business’s reputation.</p>
<p>However, despite the benefits, many merchants still struggle with the certification process, leading to vulnerabilities for consumers. In order to stay one step ahead and navigate the potential PCI pitfalls, it is important to find a certified provider who can help walk you through the process as well as any follow up. Failing to meet these requirements or addressing security issues that may be discovered can not only result in heavy fines, but also damage to the overall integrity of your business.</p>
<p>With these factors in mind, McAfee SECURE has put together a PCI Certification Solution Brief to provide a more in depth break down of services available to eCommerce merchants.</p>
<p><b></b><b>Getting Started: PCI SAQ and Vulnerability Scanning</b></p>
<p>The first and most important steps toward achieving PCI compliance start by completing the annual <a href="https://www.pcisecuritystandards.org/merchants/self_assessment_form.php">Self Assessment Questionnaire</a> and receiving quarterly vulnerability scanning. Depending on your business and how you choose to process card transactions, there are five different SAQs to choose from. Each poses specific questions to help you discover internal security practices and risks to your website, store, or back office.</p>
<p>Aside from submitting the SAQ, merchants must also work with a <a href="https://www.pcisecuritystandards.org/approved_companies_providers/approved_scanning_vendors.php">PCI-approved vendor (ASV)</a> to complete an <a href="http://www.mcafee.com/us/mcafeesecure/products/vulnerability-assessment.html">external evaluation</a> of all internet connected points, including office networks, employee telecommuting connections, as well as permanent internet services like your website and email accounts.</p>
<p>While simple enough in practice, these two areas can cause merchants a lot of headaches. Identifying and completing the correct self-assessment form can be difficult for small to medium sized merchants who lack a dedicated compliance specialist or team. Using a subpar service can result in dangerous risks left unattended, like unencrypted forms and sensitive cookies. Additionally, once the vulnerability scans have been completed, merchants must then address any urgent weaknesses uncovered, which can often require the help of an outside security provider.</p>
<p>Our PCI Certification Service goes beyond the basics of PCI compliance validation, and offers merchants a step-by-step program to complete the requirements and maintain it in the long term.</p>
<p><b>Features:</b></p>
<ul>
<li>Approved vulnerability scanning service with expert remediation support</li>
<li>SAQ completion wizard and tutorials</li>
<li>Online service management portal</li>
<li>Optional reporting dashboard though which merchant banks and payment processors can verify merchant compliance status</li>
<li>No software or hardware to install</li>
</ul>
<p>This service makes PCI compliance validation simple, with a dedicated network of support available to help merchants navigate the requirements and ensure that their business and customers will be protected. Some additional benefits include:</p>
<p><b>Ease of Use – </b>Starting the process starts by simply enrolling your company’s domains and IP addresses online. You can then use the PCI SAQ wizard to select and complete the correct self-assessment questionnaire.</p>
<p>Additionally, launch on-demand scans as needed through the vulnerability management portal as well as view the results and access detailed remediation steps when weaknesses are discovered.</p>
<p><b>Comprehensive Vulnerability Knowledgebase – </b>Comprehensive vulnerability scans are made possible by McAfee’s vast knowledgebase, which includes tests for more than 55,000 known vulnerabilities, and is continuously updated with the latest alerts and security events.</p>
<p>The PCI DSS are crucial to the foundation of any online business—not only for ensuring safe financial transactions but also for helping to build customer confidence. Becoming PCI complaint doesn’t need to be complicated, expensive, or frustrating, so before embarking on your PCI certification journey, explore the resources available to make the process easier.</p>
<p>To learn more about the McAfee PCI Certification Service, check out our <span style="text-decoration: underline;"><a href="http://www.mcafee.com/us/resources/solution-briefs/sb-pci-certification-service.pdf">full solution brief</a></span> and be sure to visit the McAfee SECURE <a href="http://www.mcafee.com/us/mcafeesecure/index.html">website</a> to sign up for a free 90-day trial with access to the PCI wizard included.</p>
<p>Don’t forget to follow us on Twitter at <a href="http://www.twitter.com/mcafeesecure">@McAfeeSECURE</a> for the latest in eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/pci-compliance-the-value-of-getting-your-business-certified/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>State of Online Commerce 2013: Word Clouds</title>
		<link>http://blogs.mcafee.com/ecommerce/state-of-ecommerce-word-clouds</link>
		<comments>http://blogs.mcafee.com/ecommerce/state-of-ecommerce-word-clouds#comments</comments>
		<pubDate>Tue, 02 Apr 2013 15:00:41 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[mobile security]]></category>
		<category><![CDATA[PCI Compliance]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[trustmark]]></category>
		<category><![CDATA[word cloud]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=23438</guid>
		<description><![CDATA[&#160; Online commerce is having a greater impact on our lives as more and more businesses take advantage of these new sales channels, from e-tail to mobile commerce, to creating stand-alone mobile apps. With this in mind, we pinpointed four key topics impacting the eCommerce industry today, and created word clouds based on the data <a href="http://blogs.mcafee.com/ecommerce/state-of-ecommerce-word-clouds">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p style="text-align: center;"><img class=" wp-image-24100 aligncenter" alt="mcafee_ALLgraphics_v3" src="http://blogs.mcafee.com/wp-content/uploads/2013/04/mcafee_ALLgraphics_v3.jpg" width="540" height="540" /></p>
<p>&nbsp;</p>
<p>Online commerce is having a greater impact on our lives as more and more businesses take advantage of these new sales channels, from e-tail to mobile commerce, to creating stand-alone mobile apps. With this in mind, we pinpointed four key topics impacting the eCommerce industry today, and created word clouds based on the data from social media monitoring tool <a href="http://www.sysomos.com/">Sysomos</a>. For each term, we visualized the data to emphasize which terms were most frequently mentioned, indicating which areas people are most concerned with.</p>
<p>Below, we discuss the results of each and what it means about the state of online commerce.</p>
<p><b>Trustmarks</b></p>
<p>With the number of identity thefts on the rise, consumers are <a href="http://blogs.mcafee.com/ecommerce/how-confident-are-your-consumers">still concerned</a> about shopping online. <a href="http://www.mcafee.com/us/mcafeesecure/products/mcafee-secure.html">Trustmarks</a> are an integral part of helping improve security and confidence. Generally taking the form of a living icon or logo on your website, a trustmark or security seal proves that you are a legitimate organization, who abides by certain security or privacy regulations.</p>
<p>Our Trustmark word cloud showed that top priorities center on sales, building trust, helping customers, and increasing confidence among online shoppers.</p>
<p>As an online merchant, earning your customers’ trust is an integral part of success and using a security seal is a great way to start.</p>
<p><b>Security</b></p>
<p>Along with the number of eCommerce related incidents, the numbers of security breaches in general have also <a href="http://www.theverge.com/2013/3/11/4091194/hacker-attack-hit-car-companies-us-government-agencies">continued to rise</a>. The frequency of words like “breach”, “advice”, “software” and “virus” indicate that the sentiment around online security today is still concerned. From this word cloud, it’s clear that consumers are not the only ones who are unsure about keeping personal information safe; businesses are also searching for help against hackers. Website vulnerability scanning is essential, but it’s also important to remember <a href="http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide">basic security protocols</a> like firewalls and web application protection.</p>
<p><b>PCI Compliance</b></p>
<p>With online security a key concern, and important part of keeping your online business safe is following the PCI compliance regulations for accepting credit card payments. Our word cloud on the same topic indicated that while there is a connection between security and compliance, there is still a need for more guidance. “Help”, “SMB” and “consequences” were key terms associated with PCI and tie in directly to the reality that many merchants are struggle with these regulations and oftentimes lack proper education around it.</p>
<p><b>Mobile Commerce</b></p>
<p>While more and more consumers are shopping online, they are also embracing mobile commerce. Whether it’s purchasing goods via a mobile website or using a native app, the pervasiveness of smartphones has had an impact on how we shop. The most popular terms associated with mobile commerce support this notion as well as indicate continued <a href="http://bgr.com/2011/03/18/secure-mobile-payments-appeal-to-94-of-north-americans/http://bgr.com/2011/03/18/secure-mobile-payments-appeal-to-94-of-north-americans/">security worries exist</a>. Like your eCommerce site, protecting any mobile offerings in the same way is important, especially as this platform continues to expand.</p>
<p>Understanding some of the most pervasive terms in the industry is a great way to see where we are headed. In order to keep eCommerce moving forward, merchants must focus on security first and foremost, keeping in mind how trends like mobile commerce will impact consumer safety.</p>
<p><a href="http://www.mcafeesecure.com/us/products/ms-features.jsp">Visit our website</a> for more information on McAfee SECURE services, and be sure to follow us on Twitter at <a href="http://www.twitter.com/#!/mcafeesecure">@McAfeeSECURE</a> for the latest in eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/state-of-ecommerce-word-clouds/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>3 Recent Cybercrimes – Why Security Matters to Your Online Business</title>
		<link>http://blogs.mcafee.com/ecommerce/3-recent-cybercrimes-why-security-matters-to-your-online-business</link>
		<comments>http://blogs.mcafee.com/ecommerce/3-recent-cybercrimes-why-security-matters-to-your-online-business#comments</comments>
		<pubDate>Mon, 01 Apr 2013 15:00:05 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[cyberattacks]]></category>
		<category><![CDATA[Cybercrime]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=23343</guid>
		<description><![CDATA[The economy is improving, consumer confidence is up, and eCommerce is expected to grow 13% in 2013, all good signs right? However, along with these positive signs, the online threat landscape still continues to grow. In the last two months alone, cyberattacks have not only been high in quantity, but also high in quality, hitting <a href="http://blogs.mcafee.com/ecommerce/3-recent-cybercrimes-why-security-matters-to-your-online-business">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>The economy is improving, consumer confidence is up, and eCommerce is expected to <a href="http://www.internetretailer.com/2013/03/13/us-e-commerce-grow-13-2013">grow 13% in 2013</a>, all good signs right? However, along with these positive signs, the online threat landscape still continues to grow. In the last two months alone, cyberattacks have not only been high in quantity, but also high in quality, hitting tech industry giants and many others along the way. While each attack had a different objective, the most important common denominator was the need for better security.</p>
<p>Whether you’re a web giant like Facebook or a local online flower shop, security is imperative when it comes to running an online business. Hackers can and will try to get through your defenses, so without putting in the necessary effort to keep them out, you could face serious consequences.</p>
<p><b>Below, we break down 3 of the most recent cybercrime incidents and what they mean for your online business.</b></p>
<p><b>1. Password Reset Nightmares</b></p>
<p>Recently, hackers breached a well-known note-taking software company as well as a customer service software provider, exposing the email and login information of millions of individuals. In both cases, the companies affected had to issue password-reset notifications to customers, as well as to third parties as a side effect of the breach. While both companies acted quickly and claimed that no other information had been exposed, these two incidents once again underscore the risks posed by unidentified site weaknesses.</p>
<p>Email addresses and passwords were the casualties this time, but for online merchants, financial information is an even more tempting target. It’s still unclear how the hackers got in, but with the large number of <a href="http://mcaf.ee/hzcna">active vulnerabilities</a> that many websites have, it’s possible that both incidents could have been avoided with better security. Keep your business from facing a similar situation by <a href="http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide">utilizing safety measures</a> like firewalls, web application protection, and frequent <a href="http://www.mcafee.com/us/mcafeesecure/products/vulnerability-assessment.html">vulnerability scanning</a>. Dealing with the fallout from a breach is a huge undertaking, and aside from password reset headaches and dealing with a horde of angry customers, it could have potentially fatal consequences for smaller businesses.</p>
<p><b>2. Beware of Third Party Vulnerabilities</b></p>
<p>Last month, some of the tech industry’s most powerful companies were hit with a series of security breaches, most likely stemming from the same corrupted developer site. Some employees at these top tech companies had their computers compromised—and potentially company data along with it—after using a site infected with malware.</p>
<p>Moral of the story: Hackers are always looking for new ways to get into your business, and going through a third party is a great way to start. As an online merchant, it is important to remember that employee devices like laptops and smartphones can pose a big security risk. While these particular attacks centered on an <a href="http://www.zdnet.com/apple-facebook-employees-hacked-via-website-malware-java-vulnerability-7000011601/">iPhone Dev SDK website</a>, it’s important to always use a secure network at your office and coach employees on good security and compliance practices. Ecommerce is a bigger target than ever, and even if you’ve taken the proper external precautions, it’s crucial to protect and be aware of how company devices are being used.</p>
<p><b></b><b>3. Social Media  &#8211; Just Another Door for Hackers</b></p>
<p>Social media is shaping up to be an essential vehicle for brands to connect with customers, troubleshoot issues, and advertise. However, aside from the benefits, social networks can present some complications when it comes to keeping your online business and customers safe. Recently, a slew of major brands had their <a href="http://www.nytimes.com/2013/02/25/technology/twitter-hacks-force-companies-to-confront-security-on-social-media.html?pagewanted=all&amp;_r=0">Twitter accounts hijacked and defaced</a>, highlighting the need for better security for brands using these platforms.</p>
<p>Regardless of whether you run your social channels internally or outsource channel management, you should have some form of security protocol in place. It’s important to keep tabs on who has access to your accounts, which employees have administrative permissions, which management platforms you are using, and any apps that can access your feed’s data. Even if hackers can’t access valuable customer information from your Twitter account directly, having your social accounts breached is still a huge liability when it comes to reputation. And company embarrassment aside, any <a href="https://www.pcworld.com/article/219303/password_use_very_common_research_shows.html">password re-usage</a> could also put your other web properties at risk.</p>
<p>The last few months have certainly been eventful in the world of security, but there will undoubtedly be more incidents to come. In order to keep your business out of the headlines, it’s important to learn from others’ mistakes and take website security seriously. Constant vigilance is the best way to stay one step ahead of cybercriminals, and along with creating a strong security program, staying up-to-date on recent events will certainly help.</p>
<p>For more information on how to maintain a safe presence online, follow us on Twitter <a href="https://twitter.com/mcafeesecure">@McAfeeSECURE</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/3-recent-cybercrimes-why-security-matters-to-your-online-business/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Starting Your eCommerce Business &#8211; Web Security Survival Guide</title>
		<link>http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide</link>
		<comments>http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide#comments</comments>
		<pubDate>Thu, 21 Mar 2013 15:00:50 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[online security]]></category>
		<category><![CDATA[SMB]]></category>
		<category><![CDATA[web security]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=23097</guid>
		<description><![CDATA[Ecommerce is shaping up to be a major part of the global retail market, with Forrester predicting that U.S. online retail sales alone will top $370 Billion by 2017. With this in mind, it’s no wonder so many people hope to take advantage of these profits by creating their own online business. Although it’s easier <a href="http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>Ecommerce is shaping up to be a major part of the global retail market, with Forrester predicting that U.S. online retail sales alone will <a href="http://mashable.com/2013/03/12/forrester-u-s-ecommerce-forecast-2017/">top $370 Billion by 2017</a>. With this in mind, it’s no wonder so many people hope to take advantage of these profits by creating their own online business. Although it’s easier than ever to establish an online store, security is crucial to achieving long-term success.</p>
<p>Aside from the legal and cosmetic processes, new eCommerce merchants must take other needed steps to provide customers with a safe and secure site for purchasing goods. Below, we discuss six security related rules online retailers must follow in order to survive.</p>
<p><b>Backend security basics</b></p>
<p>Running a successful eCommerce business starts by ensuring that your site’s backend systems are properly secured. Especially in the beginning stages, it could only take one data breach to potentially cripple your entire business – and in some cases, your bank account. While creating a full security plan may seem daunting, some of the most important places to start are establishing a firewall and protecting web applications.</p>
<p>As an initial step, Firewalls are essential for stopping attackers before they can breach your network and gain access to critical information. Once that is accomplished, you must also add an extra layer of security to the web applications, or your website itself—meaning contact forms, login boxes, search queries, etc. Web application firewalls will ensure that your ecommerce environment is protected from application-level attacks like <a href="https://www.owasp.org/index.php/SQL_Injection">SQL injections (Structured Query Language)</a> and <a href="https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)">cross-site scripting (XSS)</a>.</p>
<p><b>Encryption is essential</b></p>
<p>Along the lines of backend security, encrypting sensitive data as soon as it enters your site is another critical step. Whether or not you choose to enlist a third-party payment provider to process your transactions, all other customer data, like passwords and contact information, should be encrypted before being stored in your servers.</p>
<p>Additionally, another level of mandatory protection is <a href="https://owasp.org/index.php/SSL_Best_Practices">SSL (Secure Socket Layer) session encryption</a>, and should be assigned to all financial transactions. In order to achieve this, you must purchase the SSL certification service and renew it every one to two years. SSL certification is represented by web addresses beginning with “https” and ensures that payment data is encrypted at every stage of a transaction in order to keep it out of the hands of cybercriminals.</p>
<p><b>Vulnerability monitoring</b></p>
<p>While online businesses must take responsibility for the safety of their customers, they certainly don’t have to do it alone. Partnering with an outside security vendor is key to preventing breaches, as they can provide vulnerability scanning and additional services to help discover weaknesses you may have otherwise missed. Out of 300 companies surveyed, the average number of vulnerabilities found per website was <a href="http://www.ivizsecurity.com/blog/penetration-testing/infographics-web-application-vulnerability-statistics-of-2012/">thirty-five</a> – imagine how many one without any security could have.</p>
<p>Justifying the additional costs can be difficult in the beginning, but failing to find and patch flaws could result in a much pricier outcome in the long run. According to iViz Security, <a href="http://www.ivizsecurity.com/blog/penetration-testing/infographics-web-application-vulnerability-statistics-of-2012/">82% of websites surveyed</a> had one or more critical vulnerabilities go undetected. More often than not, merchants aren’t the ones to discover mission critical issues, and even one serious security hole could result in a potentially fatal breach for a small retailer.</p>
<p>For example, implementing a website vulnerability scanning service like the <a href="http://www.mcafeesecure.com/us/">McAfee SECURE™</a> service can help online businesses avoid a litany of threats by scanning daily for thousands of vulnerabilities.</p>
<p><b>Make sure you are PCI compliant</b></p>
<p>By incorporating all of the above security measures, your business will already be part of the way through achieving PCI compliance, which is a necessity for accepting electronic payments. As more and more transactions are carried out online, stricter credit card security is becoming an imperative, and compliance with the <a href="https://www.pcisecuritystandards.org/security_standards/">PCI Data Security Standards</a> (PCI DSS) is the best place to start.</p>
<p>However, adherence to these regulations is not universal, and more often than not, small to medium sized online merchants are the culprits. Failing to comply with these regulations not only puts your business and customers at risk, but it can also lead to <a href="http://www.csoonline.com/article/730223/little-sympathy-for-merchants-in-disputes-over-pci-violations">heavy fines and other consequences</a>. Many security risks merchants face are not new, and it is <a href="http://www.esecurityplanet.com/network-security/pci-delivers-security-guidance-as-pci-dss-3.0-looms.html">the easy exploits</a>—preventable through following PCI regulations—that cause the majority of issues.</p>
<p><b>Pick your payment providers wisely</b></p>
<p>If you do decide to outsource payment processing, be aware that the responsibility doesn’t stop there. Many new merchants don’t realize that protecting customer financial information and <a href="http://blogs.mcafee.com/ecommerce/top-5-frequently-asked-questions-on-pci-with-x-cart-2">maintaining PCI compliance continues</a> even after payment processing or other functions are taken over by a third party.</p>
<p>Aside from ensuring that your own business follows PCI DSS, you must also assess the compliance of all outside providers. Even if another company is handling part of or the entire environment, merchants will still be responsible in the event of a data breach. With this in mind, cover your bases by knowing where and how the vendors to which you outsource deal with cardholder data.</p>
<p><b></b><b>Always update your website</b></p>
<p>Once your site has been established and all of the above measures have been put into place, the final step is maintenance. All too often, merchants fail to keep their websites and all of the supporting software upgraded, which can have some very serious consequences. Failure to update your software could result in a malware infection that can spread to users as well as countless other sites.</p>
<p>Foregoing website updates is not only an issue for online merchants, <a href="https://www.stopbadware.org/files/compromised-websites-an-owners-perspective.pdf">20%</a> of Stop Badware’s Compromised Websites survey respondents also admitted to not updating their software regularly. The update process will differ depending on where your eCommerce site is hosted, but whether it’s using the latest release or an open source platform, you must ensure that everything is up to date.</p>
<p>There are many factors that contribute to the success of an online store, but security is absolutely essential for maintaining it. Failing to provide website security leaves your online store vulnerable to hackers, and even if some data breaches may be inevitable, <a href="http://www.verizonenterprise.com/resources/reports/rp_data-breach-investigations-report-2012-ebk_en_xg.pdf">most are avoidable</a>.</p>
<p>Aside from the liability aspect, establishing good security practices and following all supporting regulations, will show customers that you take their safety seriously and want to provide the best eCommerce experience possible for them. Fostering consumer confidence is vital to business success and security is a great way to start building that relationship.</p>
<p><a href="http://www.mcafeesecure.com/us/products/ms-features.jsp"> Visit our website</a> for more information on McAfee SECURE services, and be sure to follow us on Twitter at <a href="http://www.twitter.com/#!/mcafeesecure">@McAfeeSECURE</a> for the latest in eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/starting-your-ecommerce-business-web-security-survival-guide/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Much Ado About #Mobile Payments with @LeafYourLife</title>
		<link>http://blogs.mcafee.com/ecommerce/much-ado-about-mobile-payments-with-leafyourlife</link>
		<comments>http://blogs.mcafee.com/ecommerce/much-ado-about-mobile-payments-with-leafyourlife#comments</comments>
		<pubDate>Mon, 18 Mar 2013 22:44:06 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[mCommerce]]></category>
		<category><![CDATA[mobile payments]]></category>
		<category><![CDATA[mobile security]]></category>
		<category><![CDATA[PCI Compliance]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=22972</guid>
		<description><![CDATA[View the story &#8220;Much Ado About #Mobile Payments with @LeafYourLife&#8221; on Storify]]></description>
				<content:encoded><![CDATA[<p><script src="http://storify.com/McAfeeSECURE/much-ado-about-mobile-payments-with-leafyourlife.js?header=false&#038;sharing=false&#038;border=false"></script><br />
<noscript><a href="http://storify.com/McAfeeSECURE/much-ado-about-mobile-payments-with-leafyourlife.html" target="_blank">View the story &#8220;Much Ado About #Mobile Payments with @LeafYourLife&#8221; on Storify</a></noscript>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/much-ado-about-mobile-payments-with-leafyourlife/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mobile Payments 101: Join @McAfeeSECURE 3/14 for #eCommChat with Sebastian Castro and William Chen of Leaf</title>
		<link>http://blogs.mcafee.com/ecommerce/mobile-payments-ecommchat</link>
		<comments>http://blogs.mcafee.com/ecommerce/mobile-payments-ecommchat#comments</comments>
		<pubDate>Fri, 08 Mar 2013 00:01:59 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[mCommerce]]></category>
		<category><![CDATA[mobile payments]]></category>
		<category><![CDATA[mobile security]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=22716</guid>
		<description><![CDATA[Accepting mobile payments is quickly becoming an important element of any mobile commerce strategy, and many merchants are moving to adopt it. However, like so many new technologies, security is still an issue when it comes to the mobile payments space. Whether it’s mobile POS, NFC, or other digital currencies, navigating the compliance and usability <a href="http://blogs.mcafee.com/ecommerce/mobile-payments-ecommchat">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>Accepting mobile payments is quickly becoming an important element of any mobile commerce strategy, and many merchants are moving to adopt it. However, like so many new technologies, security is still an issue when it comes to the mobile payments space. Whether it’s mobile POS, NFC, or other digital currencies, navigating the compliance and usability hurdles remains a barrier to entry for many small to medium sized businesses.</p>
<p>Today, cybercriminals have gotten craftier than ever, and merchants are struggling to keep up with their changing tactics. As more credit card transactions are processed through or with mobile devices, the threats from malware and fraud will increasingly impact retailers, customers, and alternative payment methods alike.</p>
<p><b>Thursday, 3/14 at 11am PT, join McAfee SECURE and co-hosts </b><a href="https://twitter.com/scastrogalnares"><b>Sebastian Castro</b></a><b>, COO &amp; Founder, and </b><a href="https://twitter.com/oeily"><b>William Chen</b></a><b>, Senior Software Program Manager at </b><a href="http://www.leaf.me/"><b>Leaf</b></a><b>, as we discuss best practices and recommendations for getting started safely with mobile payments.</b></p>
<p>Whether you are an online merchant or brick and mortar-based business, the chances are high that mobile payments will play a role in how you interact with your customers. During the chat, Sebastian and William will discuss some of the most common security and usability hurdles companies face, as well as how to mitigate them when exploring mobile commerce in any form.</p>
<p>We would love to hear your personal experiences with mobile payments and any tips or insights into how you can successfully incorporate a deployment into an existing business strategy.</p>
<p><b>How do I participate in #eCommChat?</b></p>
<p><b>1. Find</b></p>
<ul>
<li>Search for the<b> </b><a href="https://twitter.com/search/realtime?q=%23eCommChat&amp;src=typd">#eCommChat hashtag</a> (via TweetChat, TweetDeck, or a Twitter client) and watch the real-time stream.</li>
</ul>
<p><b>2. Follow</b></p>
<ul>
<li><a href="https://twitter.com/McAfeeSECURE">@McAfeeSECURE</a> will get the conversation rolling with our co-hosts by posing some initial questions and fielding community responses.</li>
</ul>
<p><b>3. Engage!</b></p>
<ul>
<li>Tweet your reactions, questions and @reply’s and be sure to tag all of your tweets with the #eCommChat hashtag.</li>
<li>#eCommChat should last about an hour.</li>
</ul>
<p>We look forward to seeing you in the stream next Thursday, 3/14 at 11am PT! RSVP <a href="http://twtvite.com/ecommchat-mobile101" target="_blank">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/mobile-payments-ecommchat/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How McAfee SECURE Services Can Help Enterprises</title>
		<link>http://blogs.mcafee.com/ecommerce/how-mcafee-secure-services-can-help-enterprises</link>
		<comments>http://blogs.mcafee.com/ecommerce/how-mcafee-secure-services-can-help-enterprises#comments</comments>
		<pubDate>Fri, 01 Mar 2013 17:48:21 +0000</pubDate>
		<dc:creator>Sarah Grayson</dc:creator>
				<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[online security]]></category>
		<category><![CDATA[PCI Compliance]]></category>
		<category><![CDATA[PCI DSS]]></category>
		<category><![CDATA[Trust and Safety]]></category>
		<category><![CDATA[trustmark]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.mcafee.com/?p=22522</guid>
		<description><![CDATA[Whether you are a large-scale online business or a mom and pop storefront, all merchants can and must have a strong security strategy. With Retail now the number one most targeted industry, accounting for 48 percent of all data breach incidents in 2012 alone, it is crucial for organizations of any size to protect themselves <a href="http://blogs.mcafee.com/ecommerce/how-mcafee-secure-services-can-help-enterprises">Read more...</a>]]></description>
				<content:encoded><![CDATA[<p>Whether you are a large-scale online business or a mom and pop storefront, all merchants can and must have a strong security strategy. With Retail now the number one most targeted industry, accounting for <a href="http://finance.yahoo.com/news/trustwave-reveals-increase-cyber-attacks-141500115.html">48 percent of all data breach incidents in 2012</a> alone, it is crucial for organizations of any size to protect themselves and their customers by eliminating potential security threats.</p>
<p>Oftentimes, it is the small to medium sized businesses that miss the security mark because of lack of resources or knowledge, but many larger online merchants exhibit a much more diverse set of issues when it comes to securing their websites. Below we discuss three ways adding additional protection can help enterprises stay one step ahead of cyber criminals.</p>
<p><b>Trustmarks</b></p>
<p>Consumers are more wary of shopping online and <a href="http://blogs.mcafee.com/ecommerce/how-confident-are-your-consumers">that’s a fact</a>. While larger, more established sites may have an easier time bringing in new customers despite these fears, utilizing the power of trustmarks or security seals can have an impact on enterprise sales. First impressions are instrumental in determining sentiment for many situations and eCommerce is no different—aside from assets like product photos, the presence of a trustmark can influence a consumer’s decision to shop or not.</p>
<p>Success is not always proportional to size and larger merchants shouldn’t only rely on their reputation to drive revenue. According to a Harris Research survey, 60 percent of users were apprehensive about sharing personal details online with sites they had never shopped at before—large or small. By boosting customers’ confidence, security seals ultimately lead to an increase in traffic and sales – and a boost to your bottom line.</p>
<p><b>Vulnerability Scanning</b></p>
<p>The recent string of <a href="http://www.guardian.co.uk/technology/2013/feb/16/facebook-hacked">high-profile data breaches</a>, plus <a href="https://www.informationweek.com/security/attacks/zappos-hack-exposes-passwords/232400441">those that occurred in 2012</a>, drive home the reality that even industry giants are vulnerable to attack. Ecommerce has become a major part of US retail sales culture, and as online businesses become more profitable, cyber criminals will be quick to follow the money. As your business grows, your security plan must growth with it. In the process of building a strong internal team, it is also important to enlist the help of third party providers, who can help find and patch potential weaknesses.</p>
<p>Complex websites offer hackers many more opportunities to slip in unnoticed, which is where having a second pair of eyes can come in handy for larger online merchants. Aside from network firewalls, web applications and code must be scanned continually to avoid application-level vulnerabilities, such as code revelation, cross-site scripting, and SQL injection. Additional revenue means more to lose in the event of a breach and more often than not, <a href="http://www.wired.com/images_blogs/threatlevel/2012/03/Verizon-Data-Breach-Report-2012.pdf">outside parties will be the ones to discover the incidents</a> before an internal team will.</p>
<p><b>PCI Compliance</b></p>
<p>In today’s threat laden environment, staying up to date with credit card security standards, like PCI DSS, is crucial for large and small retailers alike. The size of your business will determine the specific compliance requirements that must be met, but compliance is vital for all merchants who accept credit cards. In the end, nothing is more important than keeping customer’s payment card data secure.</p>
<p>A major part of these data security standards focus on eliminating unnecessary data as well as keeping detailed tabs on what is stored, locally or with a third party platform. The larger your organization is, the more places customer data can hide, unencrypted for criminals to find. Along with frequent vulnerability scanning, following these standards should be part your enterprise security strategy. As we’ve <a href="http://blogs.mcafee.com/ecommerce/top-5-frequently-asked-questions-on-pci-with-x-cart-2">discussed before</a>, the business risks and ultimate costs of non-compliance can amount to high fines, legal fees, decreases in stock equity, and especially lost business.</p>
<p>Boosting your enterprise security strategy with trustmarks, vulnerability scanning, and PCI compliance can ultimately lead to an increase in traffic and sales, regardless of size. Through these services, larger merchants can help provide assurance to first time visitors as well as encourage those who may have doubts regarding the safety of eCommerce transactions in general.</p>
<p><a href="http://www.mcafeesecure.com/us/products/ms-features.jsp">Visit our website</a> for more information on these McAfee SECURE services, and be sure to follow us on Twitter at <a href="http://www.twitter.com/#!/mcafeesecure">@McAfeeSECURE</a> for the latest in eCommerce news and events.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.mcafee.com/ecommerce/how-mcafee-secure-services-can-help-enterprises/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
