[Autogenerated] Let's go back to the retail stores network of wide
brain coffee and see how scope could be reduced by outsourcing
some of the payment card processing.
A very common technique now in the retail environment is to
take all cardholder data out scope by using validated point
to point encryption solutions.
Envy solutions.
The cardholder data is strongly encrypted in secure module
inside the permit terminal and then transmitted to a point to
point encryption solution provider, who then passes it to the acquiring bank.
The solution provider will also look after the clearing file.
They can provide the necessary reconciliation information to an organizations of
carrying system on with point to point encryption in place.
There's no storage,
processing or transmission of cardholder data anywhere
in the wired brain coffee systems, and it's PC idea,
says compliance.
But this channel will be restricted to the number of
requirements listed in S a Q P two p A, which is quite small.
If the point of sale system requires something that
looks like a 16 digit panto operate,
the payment terminal can also just generate a truncated power,
a token to send to it.
And yes,
I completely understand that this requires replacing every
single payment terminal in the organization.
But that's something that has been them every few years, anyway.
And with the drive to accepting contact list transactions,
many organizations are taking advantage of the fact that they
have to upgrade their terminals anyway.
And they're deploying point to point encryption solutions at the same time.
Now here's the wide brain coffee e commerce network.
And again,
let's see if any of this could be sensibly outsourced and the answer is yes.
It could be outsourced very easily when the consumer
is ready to make their payment,
there could be redirected to a payment page hosted
by a payment service provider,
and then the wide brain coffee website doesn't see any Kartal.
The data and so wide brain will just need to complete the
requirements contained in S a que a to validate their PC idea says
compliance for this payment acceptance channel.
And yes, that's another business change,
and there will be a cost of using the payment service provider.
But I can almost guarantee that this cost will be smaller than
maintaining the website to the level of prescriptive technical
controls on compliance that PC ideas s requires