In restaurants, hotels and shops, POS systems run all day, are used by many people and often share a network with guest Wi-Fi. That makes them attractive targets. Stolen card data means financial loss, damaged bank relationships and a damaged reputation.
1. Separate the POS network
Tills, kitchen displays and payment terminals should run on a separate network (VLAN) from guest Wi-Fi and office computers. The guest network should reach the internet only, never internal systems.
2. Keep card data out of your systems
Work with bank-provided terminals that encrypt card data directly. Card numbers should never appear in the POS software, spreadsheets or emails.
3. Personal users and permissions
Instead of one shared "till" password, give every employee their own user. Voids, refunds and discounts should require permission and be logged. This improves security and makes misuse easier to trace.
4. Keep up with updates
Update POS software, operating systems and network devices regularly. Tills running unsupported operating systems carry serious risk.
5. Control remote access
Remote access tools left permanently open for support companies are among the most common entry points. Open remote access only when needed, with multi-factor authentication and logging.
6. Physical security
Check terminals regularly for skimming devices. Disable unnecessary use of USB ports on till computers.
7. Backup and offline mode
Test offline mode and data synchronisation so sales continue during an internet or server outage, and back up sales data regularly.
What is PCI DSS?
PCI DSS is the security standard set by the card schemes for any business that processes, stores or transmits card data. The scope of your compliance obligations depends on your transaction volume and payment setup and is defined by your acquiring bank. Keeping card data out of your own systems significantly reduces both scope and risk.
ujans plans POS installation, network separation, user permissions and secure remote access together for cafés, restaurants, hotels and shops.