TNS BevMo! Case Study

2
‘BevMo! Goes Secure with End-to-End Encryption Transaction Network Services (TNS) is one of the leading providers of fast, secure and cost effective data communication services for transaction-oriented applications Background Beverages & More! (BevMo!) was founded in 1994 and opened six stores in the San Francisco Bay Area during that year. Since then, BevMo! has become one of the leading alcoholic beverage-lifestyle speciality retailers in the western United States and among the largest in the country, with over 100 stores throughout California and Arizona. The TNS and VeriFone VeriShield Protect strategy gave us the freedom to reallocate our capital spending for a next- generation POS platform versus a compliance- orientated and expensive upgrade, which was a positive for BevMo! Business Challenge BevMo! was facing a July 1st 2010 deadline for its payment systems to be Payment Application Data Security Standard (PA DSS) and PCI PED compliant. Also, the BevMo! payment network and the 500+ point-of-sale devices that it supports were fully within PCI DSS scope, so the team faced a daunting set of tasks to ensure that they would be able to pass their annual PCI review process. After assessing all of the options, BevMo! concluded that a solution that would enable it to completely remove payment card data from its storage, processing and payment systems environment was the most effective approach to card security, and the most efficient path to meeting its compliance requirements. By eliminating the transmission of unencrypted cardholder data within its payment network environment, BevMo! has dramatically reduced its risk exposure and simplified its compliance requirements. Because the TNS service is fully managed within the TNS Secure Payment Network, the only new infrastructure that was required was the installation of new payment terminals. BevMo! estimated that the selection of this solution to assist in PCI compliance and improve security helped them redirect up to $1 million of capital expenditures into other more productive store system upgrades. Solution BevMo! found its answer via a partnership between TNS and VeriFone. The TNS Managed POS Encryption service was selected to assist BevMo! in quickly implementing VeriFone’s VeriShield Protect encryption solution. TNS manages the transmission of the encrypted cardholder data, the decryption of the data, and the delivery of the payment transaction to BevMo!’s payment processor. This combined solution removed cardholder data from BevMo!’s store systems, dramatically improving card data security and greatly assisting its PCI compliance efforts. US Nov 14 www.tnsi.com One Connection – A World of Opportunities Outcome Dan Carter, Chief Financial Officer at BevMo!, said: CASE STUDY

Transcript of TNS BevMo! Case Study

Page 1: TNS BevMo! Case Study

‘BevMo! Goes Secure with End-to-End EncryptionTransaction Network Services (TNS) is one of the leading providers of fast, secure

and cost effective data communication services for transaction-oriented applications

BackgroundBeverages & More! (BevMo!) was founded in 1994 and

opened six stores in the San Francisco Bay Area during that

year. Since then, BevMo! has become one of the leading

alcoholic beverage-lifestyle speciality retailers in the western

United States and among the largest in the country, with

over 100 stores throughout California and Arizona.

The TNS and VeriFone

VeriShield Protect strategy

gave us the freedom to

reallocate our capital

spending for a next-

generation POS platform

versus a compliance-

orientated and expensive

upgrade, which was a positive

for BevMo!

Business Challenge

BevMo! was facing a July 1st 2010 deadline for its payment systems

to be Payment Application Data Security Standard (PA DSS) and

PCI PED compliant. Also, the BevMo! payment network and the

500+ point-of-sale devices that it supports were fully within PCI

DSS scope, so the team faced a daunting set of tasks to ensure

that they would be able to pass their annual PCI review process.

After assessing all of the options, BevMo! concluded that a solution

that would enable it to completely remove payment card data

from its storage, processing and payment systems environment

was the most effective approach to card security, and the most

efficient path to meeting its compliance requirements.

By eliminating the transmission of unencrypted cardholder data within its payment network environment, BevMo! has dramatically reduced its risk exposure and simplified its compliance requirements.

Because the TNS service is fully managed within the TNS Secure Payment Network, the only new infrastructure that was required was the installation of new payment terminals. BevMo! estimated that the selection of this solution to assist in PCI compliance and improve security helped them redirect up to $1 million of capital expenditures into other more productive store system upgrades.

SolutionBevMo! found its answer via a partnership between TNS and VeriFone. The TNS Managed POS Encryption service was selected to assist BevMo! in quickly implementing VeriFone’s VeriShield Protect encryption solution. TNS manages the transmission of the encrypted cardholder data, the decryption of the data, and the delivery of the payment transaction to BevMo!’s payment processor. This combined solution removed cardholder data from BevMo!’s store systems, dramatically improving card data security and greatly assisting its PCI compliance efforts.

US Nov 14www.tnsi.com

One Connection – A World of Opportunities

Outcome

Dan Carter, Chief Financial

Officer at BevMo!, said:

CASE STUDY

A3700 BevMo case study 210x280.indd 1 05/12/2014 15:08

Page 2: TNS BevMo! Case Study

www.tnsi.com US Nov 14

Why Choose TNS ManagedPOS Encryption?

The PCI Security Standards Council Participating Organization logo is a trademark or service mark of The PCI Security Standards Council in the United States and in other countries. One Connection – A World of Opportunities

Features

• Fully managed end-to-end encryption solution – by

combining TNS’ payment industry

expertise and VeriFone’s

VeriShield Protect® solution you

can remove data theft danger and

reduce card data security concerns.

• Fast integration for merchants and processors – no development

work is required by you or your

processor, as we provide

integration to your processor’s

host platform. This dramatically

reduces implementation time and

ongoing support costs.

• Highly redundant and available –

multiple high capacity VeriShield

Protect Decryption Gateways

located within the resilient TNS

network use dynamic alternate

routing capabilities to ensure your

transactions are processed

securely and successfully.

• Online management reporting –

TNS Online provides you

increased control of your

payments through a web based

management portal that provides

near real-time visibility of your

encrypted transactions.

Benefits

Eliminate the potential for compromise of card holder data –

the combined strength and

expertise of TNS and VeriFone

provides the technology, network

management and communication

service needed to eliminate “clear”

card holder data from merchant

POS applications, networks and

servers, and securely delivers

transactions to your processor.

Compliance simplification - the VeriShield Protect format

preserving technology encrypts

transaction data and greatly

reduces security compliance

requirements.

Cost effective deployment of end-to-end encryption - the TNS

Managed POS Encryption service

minimizes your up-front capital

expense, eliminates the need to

pay ongoing service maintenance

expense and dramatically reduces

compliance certification costs.

Flexibility - TNS understands that

you have specific requirements.

Our experienced engineers will

work with your network team to

provide rapid, seamless integration

that meets your current and future

business requirements.For more information, please

email [email protected],

call +1 866 523 0661,

or visit www.tnsi.com

A3700 BevMo case study 210x280.indd 2 05/12/2014 15:08