Visa Inc. · NYSE:V
Visa — Technical Presentation (October 2019)
25 slides from Visa's technical presentation, Oct 23, 2019
Slide 1: Compromise Event Reporting and Management Webinar
Compromise Event Reporting and Management Webinar Emily Shannon, Craig Johnson & Stoddard Lambertson Visa Fraud and Breach Investigations October 23, 2019
Slide 2: Disclaimer
Disclaimer Notice The information, recommendations or “best practices” contained herein are provided "AS IS" and intended for informational purposes only and should not be relied upon for operational, marketing, legal, technical, tax, financial or other advice. When implementing any new strategy or
Slide 3: Agenda
Agenda • Fraud and Compromise Trends and Schemes • Payment Fraud Disruption (PFD) Capabilities • Visa’s What To Do If Compromised Version 6.0 • Requirements for a Compromise Event for Members • eCommerce Threat Disruption (eTD) • Investigations Fees and Non-Compliance Assessments • Global Investigat
Slide 4: Payment Fraud Disruption: At-A-Glance
Payment Fraud Disruption: At-A-Glance First response to major attacks impacting the payment ecosystem, the Risk Operations Visa brand, and/or Clients Center Identification, analysis and disruption of fraud and crime through early Payment Systems Intelligence detection and alerting Operational
Slide 5: Global Compromise Trends
Global Compromise Trends Unique Cases (Brick & Mortar vs. eCommerce) ATM Cash Out Attacks By Region 60% 56% 50% 39% 55% 40% 76% 26% 82% 30% 80% 20% 19% 20% 13% 13% 11% 44% 10% 4% 19% 0% 5% 12% 0% 2016 2017 2018 2019* AP CEMEA LAC VE US Brick & Mortar eCommerce Data Source: VIP 2018 2019 Unique Event
Slide 6: Current and Emerging Fraud Trends
Current and Emerging Fraud Trends Fraudulent Clearing and Settlement and Purchase Return Authorization Messages Attack Vectors: Force Post Batches Purchase Return Fraud Criminals program and (Purchase Return • POS Device or Gateway connect POS devices or Authorizations) Cloning gateways to a merchan
Slide 7: Visa's What To Do If Compromised Version 6.0
Compromise Event Reporting and Management Visa’s What To Do If Compromised Version 6.0
Slide 8: Visa Payment Fraud Disruption Capabilities
Visa Payment Fraud Disruption Capabilities Vital Signs Real-time ATM Cashout defense eCommerce Threat Disruption Proactive identification of eCommerce merchant breaches Risk Operations 24x7 Operational fraud monitoring for clients worldwide 8 ©2019 Visa. All rights reserved. Visa Public
Slide 9: Visa's What to do if Compromised (WTDIC) Version 6.0
Visa’s What to do if Compromised (WTDIC) Version 6.0 WTDIC establishes procedures for reporting and responding to a suspected or confirmed account data compromise event. WTDIC guides entities through critical, required compromise event components and procedures that include: • Providing notification
Slide 10: Compromise Event Reporting Requirements
Compromise Event Reporting Requirements Submit Notification to Visa Within Three (3) Calendar Days An entity that suspects or confirms unauthorized access to any Visa payment account data, or to any payment system that stores, processes or transmits Visa payment account data, is required to ensure t
Slide 11: New Timeframes for Investigations Management Milestones
New Timeframes for Investigations Management Milestones (simplified) Breach detected and Visa Investigator Merchant Acquirer reported to Visa creates case in GIMT provides Incident Report and updates case via GIMT 3 calendar days 3 calendar days Visa Case Manager Visa Issuers receive At-risk account
Slide 12: Financial Institution Attacks Increasing
Financial Institution Attacks Increasing Specific Member Requirements for suspected or confirmed Compromise Events Member financial institutions that suspect or confirm unauthorized access to any Visa cardholder data, including those payment systems that store, process, or transmit cardholder data
Slide 13: eCommerce Threat Disruption (eTD)
eCommerce Threat Disruption (eTD) • Visa’s eCommerce Threat Disruption (eTD) is a fee-free proprietary capability that allows Visa to detect and disrupt eCommerce merchant Compromise Events before fraud is reported • eTD is a global capability that strives to reduce Identification Analysis Disruptio
Slide 14: Investigation Fee and Assessment Avoidance Strategies
Compromise Event Reporting and Management Investigation Fee and Assessment Avoidance Strategies
Slide 15: Investigation Fees
Investigation Fees • Investigation Fees incentivize entities to fully cooperate with Visa throughout each phase of the investigation and to complete the investigation in a timely manner. • Full cooperation during an investigation helps to quickly contain and mitigate a Compromise Event and minimize
Slide 16: Investigation Fee Example
Investigation Fee Example June July Aug Sept May 2020 Oct 2020 Nov 2020 2020 2020 2020 2020 Merchant detects Data Compromise PFI Investigation Acquirer Billed & informs continues throughout Investigation Fee for Acquirer all of October month of October May 6 PFI completes investigation, sends final
Slide 17: Non-Compliance Assessments
Non-Compliance Assessments Members are subject to a non-compliance assessment of USD 100,000 per incident for failing to adhere to requirements specified in WTDIC Non-Compliance Assessments (NCA) are avoidable and designed to incentivize swift notification and cooperation during all phases of an i
Slide 18: The Visa difference
The Visa difference Global Investigations Management Tool Connecting over 2,700 clients globally with a central platform for Investigations management Intelligence Driven, Predictive, Authoritative 18 ©2019 Visa. All rights reserved. Visa Public ©2019 Visa. All rights reserved. Visa confidential
Slide 19: The Visa difference: GIMT
The Visa difference Global Investigations Management Tool (GIMT) launched in 2018 Issuing Clients GIMT Acquiring Clients A centralized platform for efficiently managing global investigations and payment card data compromises Secure Central Global Available on Visa Online for all A central repository
Slide 20: Key Benefits
Key Benefits Differentiating Visa from its competitors with immediate benefits for key stakeholders Issuers Acquirers Incentivizes reporting by removing External investigative platform that logistical barriers commonly provides bi-directional compromise Diminishes the burden borne by reported by lar
Slide 21: Contacts & Resources
Contacts & Resources: Questions? Comments? Contact: • Visa Risk Operations Center 24X7 US: 1.844.847.2106 INT: 1.650.432.3379 • Fraud and Breach Investigations: NA: usfraudcontrol@visa.com Resources: • Visa OnLine: Data Compromise & Fraud Investigations • https://secure.visaonline.com/SitePages/Cont
Slide 22: Data Security Resources
Data Security Resources Visa Global Registry of Service Providers www.visa.com/onthelist List of registered, PCI DSS validated third-party agents PCI Security Standards Council Website www.pcissc.org PCI Approved list of Forensic Investigators Qualified list of Integrator Resellers Data Secu
Slide 23: Webinar Survey
Webinar Survey 23 ©2019 Visa. All rights reserved. Visa Public
Slide 24: Q&A
Q&A Visit us at Visa OnLine: Search for “Data Compromise & Fraud Investigations” 24x7 emergencies: Visa Risk Operations Center US +1.844.847.2106 International: +1.650.432.3379 24 ©2019 Visa. All rights reserved. Visa Public
Slide 25: Thank you for attending!
Thank you for attending!