|
|
 |
Incident response procedure for account compromise
The risk of theft or data compromise continues to increase. As 100% security cannot be guaranteed, it is necessary to have an incident response plan in place that is tailored to your business environment, in order to minimize disruption or losses to business operations in the event of an incident.
The ‘Incident Response Procedure for Account Compromise’ is a useful guide containing: information on the steps needed to develop and implement effective security response procedures; how to define and quantify a security breach; the actions to take; and whom to contact.
You can download a copy of the ‘Incident Response Procedure for Account Compromise’ from the Downloads and Resources section.
By adhering to the appropriate security standards as defined in Visa’s Account Information Security (AIS) program, the risk of security incidents occurring may be minimized.
** Remember should a leak of account information occur you must advise your acquirer and Visa immediately. Visa and your acquirer will help you minimize the potential for your customers’ accounts being used fraudulently **
| |
Useful tips
If you experience a suspected or confirmed security breach, you should:
| 1. | Immediately contain and limit the exposure
To prevent the further loss of data, conduct a thorough investigation of the suspected or confirmed loss or theft of account information within 24 hours of the compromise. To facilitate the investigation:
do not access or alter compromised systems (i.e., don’t log on at all to the machine and change passwords, do not log in as ROOT) do not turn the compromised machine off. Instead, isolate compromised systems from the network (i.e., unplug cable) preserve logs and electronic evidence a backup should also be performed on the system to maintain the current state of the system to facilitate the post-mortem and forensic investigation later log all actions taken if using a wireless network, change SSID on the AP and other machines that may be using this connection (with the exception of any systems believed to be compromised) be on HIGH alert and monitor all Visa systems.
| | 2. | Contact Visa Asia-Pacific Fraud Control Group (Singapore):
| Tel: | +65 6437 5862 (during business hours) or
+65 9630 7672 (after hours)
| | Fax: | +65 6437 5801 | | Email: | apRASC@visa.com
|
|
| | | |
|
|
|
