Security
What Is a Qualified Security Assessor (QSA)?
A Qualified Security Assessor (QSA) is a person approved by the PCI Security Standards Council to audit merchants for compliance with the Payment Card Industry Data Security Standard.
Search
"personal data"
58 articles found
Security
What is Check Out?
In online shopping, converting product browsing into a completed sale after a customer visits your site is just as critical. The amount of purchases abandoned due to friction in the online buying process often exceeds successful sales.
Security
What are HTTP and HTTPS? What are the security differences between them?
When you visit a website, the protocol it supports appears at the left of the web address. Secure data transfers likewise use protocols that support http or https. Let's first take a brief look at what HTTP and HTTPS are.
Payment Systems
Can a Card's Contactless Limit Be Managed on a Per-Customer Basis?
Contactless payment has greatly improved the user experience, yet its fixed transaction limit is a common complaint. Can this limit be managed dynamically per customer? This post covers the current situation, technical and regulatory requirements and the outlook.
Cryptocurrency
What Are the Terms Used in the Cryptocurrency World?
Cryptocurrencies are becoming part of everyday life and are expected to compete seriously with card payments. This glossary explains the key crypto terms, from address, altcoin and arbitrage to halving, mining, proof of stake and stop-loss.
Laws & Regulations
Remote Identity Verification, Reliance on Third Parties and Open Banking
Digitalization is changing how banks onboard customers. This post covers digital identity, verification methods, what the Turkish ID card offers, and Article 43 of the Regulation on Information Systems of Banks and Electronic Banking Services on remote identity verification and open banking.
Fraud
What are data leakage frauds?
Data leakage is the intentional or accidental exposure of sensitive data through any channel where it is stored, processed or transmitted. This post covers its three main causes and the DLP solutions used to prevent it.
Credit Card
What Products and Services Does KKB Offer Directly to Members?
KKB was established, under banking law, to enable the exchange of all kinds of information and documents among at least five banks, and it also shares credit information about customers. The Credit Bureau of Turkey also serves deposit banks, participation banks, financial institutions, and more.
Credit Card
Can E-Commerce Sites Store Card Details?
Legally, e-commerce sites should not store card details in their own systems; they should only use them when sending transactions. Unfortunately, some sites do not follow this rule.
Credit Card
What is CVK (Card Verification Key)?
CVK (Card Verification Key) is the key information used to generate and verify CVV/CVC values, confirming their validity. It is kept as a pair of keys, CVK A and CVK B, encrypted under TMK, ZMK or LMK.
HSM & Security
What Is an HSM? What Is It Used For?
HSM, short for Hardware Security Module, is specialized security hardware built to store sensitive cryptographic keys in a physical environment and to perform cryptographic operations in the most secure way.
Payment Systems
What is SPA (Smart Payment Association)?
The Smart Payment Association (SPA) is the trade association of the smart payments industry. It provides leadership and expert guidance to help members and customers realize smart, secure and personalized payment systems and services, now and in the future.