‘Elekitolonika moe totongi kaati

Fakatokanga kihe palopalema fakatu’utamaki ‘e ala hoko

• Totongi ngāue’aki e kaati
  • Ma’u totongi ‘i hono ngāue’aki ‘ae ‘credit cards’ kaati fakamo’ua ‘i he founga kākā pe mei hono kaiha’asi.
  • Ngaahi tautea ‘e malava fakahoko he ‘ikai ke talangofua ki he Payment Card Industry Data Security Standards (PCI DSS)
  • Ngāue‘aki ha fakamatala fakaikiiki/titeila fakapa’anga ki ha taumu’a ta’efe’unga pe ko hono tauhi fakapulipuli ‘I ha vaha’a taimi loloa ‘oku ta’e fakalao.
  • Totongi ki ha kasitoma ‘oku fakamatala-loi fekau’aki mo ha koloa ne fakatau na’a ne ‘osi ma’u kae tala na’e ‘ikai ke ne ma’u pe ko ha koloa ku ma’u ka koe koloa ‘ikai na’a ne ‘ota pe tala loi ‘oku maumau.

• Totongi hu mai ‘I fakatau fakaʻilekitulonika pe ngāue’aki e kaati.
  • Malava pe totongi ki ha ‘bogus sites’ uepisaiti ta’emo’oni pe loi ki hono totongi ha koloa pe sevesi ‘ikai ke ‘i ai pe mo’oni.
  • Malava pe fakahū pa’anga ki he ngaahi ‘bogus accounts’ ‘akauni loi/ta’emo’oni koe totongi ‘o ha ngaahi koloa pe sevesi ‘ikai ke ‘i ai pe mo’oni.
  • ‘Phishing emails’ imeili faka’ai’ai koe ke fakahū e ngaahi fakamatala/titeila fakaikiiki fakapa’anga ki he ‘u uepisaiti kākā.
  • ‘Vishing phone calls’ faka’ai’ai koe ke fakaha pe fakamatala e titeila pe fakaikiiki fakapa’anga he telefoni
  • Ko e ongo meʻa fakaʻosi ʻoku lau ki ai ko ha sipinga ia ʻo e ʻenisinia fakasōsiale.

Totongi hū mai ‘i fakatau fakaʻilekitulonika pe ngāue’aki e kaati

• Ke fakapapau’i ‘oku malu ‘a e e-uepisaiti
  • Fakapapauʻi ʻoku malu hoʻo ‘ecommerce’ fefakatau’aki uepisaiti ki he malu, sio mo e nonga ʻa hoʻo kau fakatau (vakai ki he ngaahi uepisaiti malu, ʻi lalo).
  • Kapau ‘oku ke fakatau ngāue’aki e kaati, fakapapau’i ko ho kautaha ‘oku fai ki he ngaahi tu’utu’ni ‘i he ‘Payment Card Industry Data Security Standards (PCI DSS). He koe ngaahi tu’utu’uni ‘oku makatu’unga ia ‘o fakatatau ia ki he ‘merchant level’ tu’unga fefakatau’aki moe ‘card issuer’ kautaha fakapa’anga ne ‘oatu ho kaati. (Vakai ki he ngaahi tu’utu’uni moe PCI levolo, ma’u atu ‘i lalo).
  • ʻI he taimi ʻoku tukuatu ai e koloa, fakaʻaongaʻi ‘proof of delivery’ (POD) tohi fakamo’oni ke fakaʻehiʻehi mei hono totongi fakafoki.
  • Makatu’unga ‘I he natula ‘oe pisinisi mo e lahi ‘oe fakatau, ‘oku fakapotopoto ange ke ngāue’aki e PayPal pe telefoni to’oto’o ki he fakatau he ‘oku sai mo malu ange ‘ene founga malu’I faka’auliliki.

• Totongi

• Fakapapau’i ma’u pe ‘oku malu e uepisaiti ke ngāue’aki he ‘initaneti. ‘oku totonu pe ke ‘asi atu e ki’i loka ‘ihe ‘browser window frame’ ’elia e peesi koe ‘oku te taipe’i ai e tu’asila uepisaiti pe ‘i he taimi te feinga ai ke lesisita. Kumi ma’u pe ‘a e fo’i lea koe ‘https://’ ‘ihe kamata’anga e tu’asila he peesi he initaneti. ‘s’ ki he ‘secure’ malu. Manatu’I, neongo,koe me’a ko ‘eni ‘oku ngali fakamahino mai ‘oku malu ho’o fetu’utaki moe tokotaha ha’ana e ‘uepisaiti’ uepisaiti ka ‘oku ‘ikai koe faka’ilonga ia ‘oku fakapapau’i koe ‘uepisaiti’ uepusaiti ‘oku mo’oni .Kuo pau keke toe fakasio fakalelei e tu’asila pe‘oku tonu pea ‘oku kalama mo tonu e sipela pea ‘oku ‘ikai ke ‘asi ha fa’ahinga me’a ‘oku ngali kehe.
• ‘Oku totonu ke ‘oua ‘e tukuatu noa’ia kiha taha pe, tuku kehe ‘a e kakai ‘oku ‘osi ‘oangē ‘enau totonu ke nau ngāue ‘aki.
• ‘oku tonu pe ke fakahoko hono fakamalohi’I fefeka ke faka’aonga’I e ngaahi lao ki he kau ngāue ‘o e kautaha kaati totongi pa’anga – kau ki ai ‘a e PIN mo hono malu’I ‘oe mata’itohi/mata’I fika faka-pulipuli hangē pe koe ta’ofi ‘oe ngaahi ha tatau ‘oe kaati.
• Manatu’I pe koe ‘credit card’ kaati fakamou’a ‘oku malu ange ia ‘I he ‘debit card’ kaati fakamou’a totongi hangatonu me ho ‘akauni faka’aho.
• ‘Ai ke mahino ki ho’o Pangikē ‘a e tu’unga ‘e iai e mo’ua ka ke mole tupu mei ha founga hia kaiha’a. Lau keke mahino’I e ‘Terms & Conditions’ tohi tut’utu’uni aleapau moe Pangikē pea kapau ‘oku ‘ikai keke fu’u māhino’i pea ke ‘eke kihe Pule he tafa’aki Pisinisi e Pangikē.

Merchant PCI DSS compliance citeria pea moe PCI levels

• Koe ngaahi fema’u ke muimui mo fai kiai ‘oku fakahoko pe ‘o fakatatau ki he tu’unga moe levolo ‘oe lahi e fefaktau’aki he ‘initaneti
• Koe tu’unga kalasi ‘e fa, ‘oku fakatefito hono fakakalakalsi me he lahi ‘oe fefakatau’aki he ‘initaneti fakata’u.
• Ka neongo pe ngaahi tu’utu’uni mei he ‘Payment brands’ ngaahi kautaha kaati ki he founga fefakatau’aki koloa, koe fatongia ‘ae kautaha fefakatau’aki ne ngāue ‘aki ‘a e ngaahi ‘Payment brands’ ngaahi kautaha kaati ke ‘ilo mo vakai pe ko fe ‘a e tu’unga pe tu’utu’ni ke muimui mo fai ki ai.
• Koe ngaahi levolo kehekehe ‘oku fokotu’u atu ia ‘I lalo ‘o fakatatau ki he lahi ‘oe fakatau ‘a e kautaha kaati ‘I he ta’u ‘e taha.
• Pe ‘e fakahoko ha fakatau, voliume ‘oku ngāue’aki pe ia ki ‘e-commerce pe ko he founga fakatau ‘i ha fa’ahinga senolo pe pea ‘oku tipeni pe ia mei he kautaha kaati, ka neongo ia, katoa e fakatau ‘oku kau

Levelo 1 Makatu’unga
Fehu’akifakapa’anga laka hake he 6 miliona ‘I he ta’u, pe ko ha mole ‘a e lekooti kautaha fefakatu’aki koloa ‘I he ‘initaneti.
Levolo 1 Fakamo’oni ki he ngaahi makatu’unga ‘oku fiema’u
Annual Onsite Security Audit (reviewed by a QSA or Internal Audit if signed by officer of merchant company and pre-approved by acquirer) and quarterly network security scan

Levolo 2 Makatu’unga
Kautaha fefakatau’aki koloa kamata mei he 1 miliona ki he 6 miliona
Levolo 2 Fakamo’oni ki he ngaahi makatu’unga ‘oku fiema’u
Hulu fakakuata ‘e ha ‘Approved Scanning Vendor (ASV) kautaha ‘oku nau ma’u e naunau ke fai‘aki e hulu.

Levolo 3 Makatu’unga
Kautaha fefakatu’aki koloa kamata mei he 20000 ki he 1 miliona per kautaha kaati fakamo’ua.
Levolo 3 Fakamo’oni ki he ngaahi makatu’unga ‘oku fiema’u
Quarterly Scan by an Approved Scanning Vendor (ASV)
Annual Self Assessment Questionnaire

Levolo 4 Makatu’unga
Kautaha fefakatu’aki koloa fakatau a’u ki he 20000 ‘ecommerce’ pe a’u ki he 1 miliona per kautaha kaati fakamo’ua
Levolo 4 Fakamo’oni ki he ngaahi makatu’unga ‘oku fiema’u
Annual Self Assesment Questionaire
Fakahoko fakatotolo faka-kuata ‘e he Approved Scanning Vendor (fakaongoongo lelei pe fiema’u ‘oku tipeni ia ‘I he tokotaha ne fiema’u ‘o fakatatau ki he ngaahi makatu’unga fokotu’u)

Uepisaiti ku malu

Tokonaki atu ha uepisaiti fefakatau’aki ‘oku malu mo fiemālie ai e kasitoma. Tokolahi e kakai kuo nau angamāheni mo mahino’i e mahu’inga ‘oe loka ‘ihe ‘browser window frame’ ’elia e peesi koe ‘oku te taipe’i ai e tu’asila uepisaiti pe ‘I he taimi te feinga ai ke lesisita. Tu’asila ku kamata ma’u pe ‘aki e ‘https://’

Ko hono fakaha mai ia e mo’oni ‘ae pisinisi ‘i he uepisaiti pea fakamo’oni ki ai faka’ilekitulonika e kautaha falala’anga koe VeriSign pe Thawte, ‘o fakahaa’i mai ‘a e malu pea moe mo’oni e fakamatala ‘I he eupisaiti ‘o ‘ikai ko ha fakamatala ne kaiha’asi ha fa’ahi kehe ta’e fakalao.

‘E malava ke ma’u ha Extended Validation (or EV-SSL) tohi fakamo’oni, kene fakaha ai ‘osi fai ngāue ki hono fakatotolo faka’auliliki ki ho pisinisi.

SSL

SSL (Secure Sockets Layer) Ko ha tekinolosia malu’i angamāheni ngāue’aki ki he fetu’utaki mei he server mo ha client hangē koe server (uepisati) moe ‘browser’ polokalama fekumi he ‘initaneti pe ko e fetu’utaki mei he ‘imeili ‘server’ uepisaiti ki he polokalama Microsoft Outlook.

SSL ne malu’i e ngaahi fakamatala mahu’inga faka’auliliki ‘oku fehu’aki he ‘initaneti. Koe ngaahi fakamatala koeni, angamaheni ‘oku faingofua hono maumau’i, uesia mo kaiha’asi.