Security and privacy options for small business.

1. Security and Privacy
for Creating Confident Customers
Know how. Know now.
Jenny Nixon, Jay Jenkins, Connie Hancock
UNL Extension Educators

2. Reputation Economy
 E-Commerce has moved from a big impersonal
space to a personalized customer experience
 Customers are looking for:
 Reasons to be confident of your business
reputation
 Testimonials from previous customers
 Ease of use
 Certificates of authenticity
 Stated privacy and security policies
Know how. Know now.

3. What is Security and Privacy?
 Process of identifying and protecting your assets
 Business data
 Customer data
 Hardware
 Software
 Reputation
 Restricting access to authorized people
Know how. Know now.

4. Security - Define
 A Security Plan is used to:
 identify, measure, monitor, and control risks
arising from the electronic exchange of
information
 A Security Policy is a written statement that
describes:
 What assets are to be protected, why, and who is
responsible
Know how. Know now.

5. Privacy Policy - Defined
Privacy policy: a statement that declares a business'
policy on how it
Collects, Stores, Releases
Personal Information
It informs what information is collected, whether it is
kept confidential, shared with partners, or sold to others.
http://en.wikipedia.org/wiki/Privacy_policy
Know how. Know now.

6. Data Security vs Use
 Data Needs
 Confidentiality
 Secure from unauthorized disclosure
 Integrity
 Unchanged
 Authentic
 Secure from destruction
 Available for use
Know how. Know now.

7. What information do I need to collect?
 Know what information you are collecting
 Know why you collect each piece of information
Know how. Know now.

8. What will I do with collected data?
 Develop a policy for storing and accessing
collected data
 Publish this policy on your web site
 Follow your policy
 Re-examine policy periodically
Know how. Know now.

9. Do Your Homework
 How much business do you expect to
conduct electronically?
 A few items?
 A moderate number of items?
 Large scale electronic sales?
Know how. Know now.

10. Things to Consider
 What forms of payment do I want to accept?
 Credit cards
 Debit cards
 Checks
 Gift cards
 International payments
 What sort of processing features do I need?
 What reporting features do I need?
Know how. Know now.

11. E-Commerce Options
 Third Party Store
 eBay
 Etsy
 Amazon
 Grow Nebraska
 Third Party Payment Processor
 Google Checkout
 PayPal
 Love Apple Farms
Know how. Know now.

12. E-Commerce Options
 Third Party Payment Gateway
 Authorize.net
 PayPal
 Harley Farms
 Totally Integrated CMS
Know how. Know now.

13. Pros and Cons
 Third Party Store
 Pro
 Minimal setup
 Flexible fee schedules
 Payment security is taken care of
 Con
 Minimal customization
 No “Home Page”
 Minimal SEO
Know how. Know now.

14. Pros and Cons
 Payment Processor
 Pro
 No integration into backend
 No security needed for payments
 Con
 Customer goes to different site and may
reconsider purchase
Know how. Know now.

15. Pros and Cons
 Payment Gateway
 Pros
 Customers stay on your site
 Purchase process is integrated into your site
 Cons
 Takes more work
 Higher level of technology needed
 Must obtain SSL certificate
Know how. Know now.

16. Features to Consider
 24/7 availability and support
 Real time feedback for customers
 Redundancy
 Anti-fraud and security solutions
 Rates and fee structures
 Trusted platform
 Stocking and order tracking
 Tax calculations
 Integration into current platform
 Ease of use
Know how. Know now.

17. Payment Processor Questions
 Data
 Where is it?
 Who has access? Are they authorized?
 How is it protected?
 How is it shared or transmitted?
 Do I have insurance against a security breach?
 What happens in a disaster? Redundancy?
 How is data backed up and restored?
 Is it scanned for vulnerability?
Know how. Know now.

18. Local Security
 Know what you have
 Data
 Hardware
 Networks
 Software
 Know where it is and how it is secured
 Know who has access
 Use policies, procedures, and reporting
 Understand legal compliance
Know how. Know now.

19. Local Security
 Secure and limit access to digital as well as physical
assets
 Keys vs Passwords
 Hardware
 Software
 Network
 Safe or vault vs Redundant and offsite backup
 Visual vs Electronic identity
 US Mail vs Cryptography
 Keep hardware and software up to date
Know how. Know now.

20. Create Confident Customers
 Create and post Security and Privacy
Policies
 Stick to your policy
 Be vigilant
 Use visual clues
Know how. Know now.

21. Visual Security Clues
 Third party certificates of authority
 Green Address Browser Bar
 https://
 Padlock symbol
Know how. Know now.

22. Mobile Payment Platforms
 Square
 Paypal Here
 GoPayment (Intuit)
 SalesVu
 ProPay Jak
 North American Bancard – Pay Anywhere
 Inner Fence
Know how. Know now.

23. Features to Consider
 Cost of reader and/or app
 Transaction costs
 Encrypted data
 Electronic receipts
 Tipping system
 Cash register and POS functions
 Reporting options
 Signature requirements
 Access to funds speed
Know how. Know now.

24. Optional Features
 Work with Windows machine
 Manage cash transactions
 Refunds/Credit
 Customized store
Know how. Know now.

25. Resources
 VISA e-Commerce Merchant’s Guide to Risk
Management
 BBB Data Security FAQ
 Payment Card Industry Data Security Standard
 GeoTrust: Creating an e-Commerce Web Site
 AVG Small Business Security Guide
 E-commerce Security Best Practice Guidelines
 Fundamentals Guidelines of e-Commerce Checkout
Design
 Broadband YouTube Videos
 Security Squad
Know how. Know now.

26. Upcoming Events
 Building Your Brand
 Women in Ag – Kearney, Feb 21,22
 eXtension Webinars - https://learn.extension.org/
 Cool Tools – Feb 14, 2013
 Pinterest – March 14, 2013
 Broadband Webinars – http://broadband.nebraska.gov
 Making Security a Priority Feb 20, 2013
 Going Mobile – March 20, 2013
Know how. Know now.

27. Contact Information
 UNL Extension Educators
 Jenny Nixon
 jnixon@unl.edu
 Connie Hancock
 chancock1@unl.edu
 Jay Jenkins
 jjenkins2@unl.edu
Know how. Know now.