Sage Pay and PCI

John Fitchett – Channel Manager

Agenda

Sage Pay OverviewSage Pay and PCI ComplianceSage Pay Payment SolutionsAutomating more than PaymentsSage Pay additional featuresSummary

Sage Pay Overview

Sage Pay was formed in 2001 to process secure e-commerce transactions Acquired by Sage Group PLC in 2006.Sage Pay is approved with all the major UK acquiring banks.Sage Pay is the UK’s largest independent PSPOver 25,000 customersSage Pay process 60m transactions with a total value of £4bn per year.

Sage Pay and PCIPCI is a set of requirements designed to ensure that ALLcompanies that Store , Process or Transmit credit card informationSage Pay is Level 1 compliantAs a PSP we are required to be PCI-DSS compliant to the highest of standards – Level 1.Member of the PCI Security Standards CouncilImplemented software, hardware, and security systems which both meet and exceed those indicated in the PCI regulations.Ensure that our network is secure at all times. Employ the latest in security hardware, multiple firewalls, loadbalancers and DDoS mitigation services.

Sage Pay Solutions - Direct

Sage Pay Direct API

Storing

Processing

Transmitting

Sage Pay Solutions - Direct

Merchants may need to invest in their infrastructure to make sure that their systems are secure and meet PCI DSS standards.

Sage Pay Solutions – Server iframe

xxxx-xxxx-xxxx-9437

xxx

Storing

Processing

Transmitting

Sage Pay Solutions – Server iframe

Card information is entered onto payment pages hosted by Sage Pay, which reduces the scope of your own PCI DSS validation

Sage Pay Solutions - Bespoke

Storing

Processing

Transmitting

Sage Pay Solutions – Bespoke

Card information is entered onto payment pages hosted by Sage Pay, which reduces the scope of your own PCI DSS validation

Automating more than Payments

Outsourced Sage Pay solutions do not restrict functionality

Token SystemAuthoriseRepeatReleaseRefundAbortCancelVoid

Sage Pay additional features

All inclusive online payments packageFraud & Risk management toolsAVSCV23D-Secure3rd Man Fraud Screening24/7 customer services

Summary

Why does PCI Matter?UK’s largest independent PSPLevel 1 CompliantPCI Compliant solutions to reduce scope of PCI validationComplete payments package

Sage Pay

John Fitchett

Channel ManagerJohn.fitchett@sagepay.com

07872 691 429

ERROR: syntaxerror

OFFENDING COMMAND: --nostringval--

STACK:

/Title

()

/Subject

(D:20090916173646+01’00’)

/ModDate

()

/Keywords

(PDFCreator Version 0.9.5)

/Creator

(D:20090916173646+01’00’)

/CreationDate

(asquires)

/Author

-mark-