Case #8: Critical business opportunity with
MasterCard and gift cards
Business
Problem:
This company produces gift cards for big box retailers, and
rebate debit cards, but were missing out on a larger revenue
opportunity with MasterCard that required the company to be
certified PCI compliant. One big problem interfered with
the business plans, the PCI self-assessments overlooked major
findings and a new PCI assessment identified over 65 very
difficult problems that needed to be fixed. The executive
leadership team thought the company was fully PCI complaint and
committed to a compliance deadline with MasterCard, but were no
way close to being compliant. Company tried remediation on
their own, but experienced a number of business interruptions.
Service Level Agreements (SLA's) were being violated and
required the VP of IT to go on an "explanation/apology tour"
with clients and how these business interruptions would not
occur in the future.
Timeframe: Three months
Budget:
$525,250
Biggest
Project Risk:
Business interruptions
already occurred prior to arrival and a future interruption
would only escalate matters that would compromise the position
for the VP of IT.
Business Solution:
Performed an analysis of the PCI findings and determined that
replacing some network equipment and purchasing
commercial-off-the-shelf (COTS) software would remediate a
majority of the findings. New software included logging,
monitoring, anti-virus, file integrity, and a unified network
manager tool for administration. Replaced several
firewalls with new firewalls that incorporated IDS. The
new hardware and software upgrade reduced the amount of
administrative work, provided better visibility into the
enterprise for better SLA management, logging tools to
troubleshoot "mystery server" shut-down issues, and dramatically
increased the security of the gift card, rebate debit card
process. In addition, the new infrastructure enabled the
company to prepare for the MasterCard opportunity by having
secure VPN concentrators for direct connections to MasterCard in
both datacenters.
Business Results: The project was completed in the allotted
time frame and budget. As a result, a PCI assessment was
completed that made the company PCI compliant. The PCI
attestation was provided to MasterCard that garnered new revenue
opportunities that required the company to hire additional staff
as a result of new business.
| |
2012 ConnectTech, LLC All rights reserved, MasterCard is a
registered trademark
Privacy Statement |
|
|
|
|
|
