Every hour, every day, merchants rely on Consorzio Triveneto S.p.A., a leading e-payment service provider. These customers count on Consorzio Triveneto, not only to deliver reliable, convenient payment services, but to safeguard the vitally sensitive payment data that customers submit. To strengthen the security of sensitive data on backup tapes, while minimizing the administrative effort required, Consorzio Triveneto turned to SecurTape from comForte.
The Challenge
As a leading provider of e-payment services, Consorzio Triveneto enables merchants to cost effectively deliver a host of convenient payment options to their customers. Given the nature of the services Consorzio Triveneto offers, ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS) is a vital mandate—lack of compliance or security breaches could jeopardize consumer privacy, the reputations of Consorzio Triveneto merchants, and the very business.
Given the emphasis placed on safeguarding consumer data and ensuring PCI DSS compliance, the staff at Consorzio Triveneto sought to enhance the security of sensitive data stored on its backup tapes. On a daily basis, Consorzio Triveneto does backup of all their HP NonStop NS14004 platforms. These tapes contain up to 2 Terabytes of data, including the primary account numbers (PAN) of consumers. As a result, these tapes would present a critical vulnerability if lost or stolen.
In prior years, the team had implemented a manual, basic process of encrypting their tapes. However, these encryption mechanisms weren’t robust enough, and they lacked such safeguards as the separation of duties in administering cryptographic keys, a critical requirement of PCI DSS. Further, these manual encryption processes represented an increasing strain on the IT and security staff at Consorzio Triveneto.
Consequently, the management team at Consorzio Triveneto sought to invest in an off-the-shelf encryption solution that would both satisfy the stringent security requirements of PCI DSS, while minimizing the operational impact of encryption.
The Solution
After an evaluation of the alternatives on the market, the decision makers at Consorzio Triveneto chose SecurTape from comForte. SecurTape enabled Consorzio Triveneto to strengthen its PCI DSS compliance, offering robust encryption and capabilities for enforcing dual control and split knowledge in cryptographic key administration. SecurTape offers seamless integration with NonStop tape utilities, which helps minimize the operational impact of implementing and administering encryption. Plus, by deploying an off-the-shelf solution that is supported by comForte’s responsive staff, Consorzio Triveneto will enjoy increased flexibility and agility in the future. As one executive explained, “This SecurTape implementation allows us to satisfy the continuously evolving needs of our markets.”
The Benefits
After implementing SecurTape, Consorzio Triveneto realized a host of significant benefits. First, by moving away from a manual, labor-intensive encryption approach, company executives estimate that they are saving about 50 staff days a year. Further, and even more importantly, SecurTape helps Consorzio Triveneto improve its compliance with PCI DSS, and strengthen the overall security of sensitive payment data. For both of these reasons, SecurTape has helped Consorzio Triveneto strengthen its operations and competitive position.
About Consorzio Triveneto
Consorzio Triveneto (http://www.constriv.it/) was founded in 1990 in order to provide outsourcing services on behalf of a group of banks based in the North-East of Italy.
Nowadays the wide and advanced range of services provided by Consorzio Triveneto puts the company into a strong leadership position in the market of electronic payment solutions and related services which include: transaction acquiring services, E-commerce payment systems and terminal management services .
Today the number of POS terminals installed and managed by Consorzio exceeds 130,000 units. Another important area of Consorzio’s activities is in Corporate Banking with more than 35,000 copies of the “Global Banking” software, Consorzio’s Corporate Banking solution, installed at its customers.