© Vendor Safe Technologies 2008 B REACHES BY M ERCHANT T YPE 70% 1% 9% 20% Data provided by Visa Approved QIRA November 2008 from 475 Forensic Audits

© Vendor Safe Technologies 2008 PCI H EADLINES

A M I AT RISK ?

© Vendor Safe Technologies 2008 W HAT I S PCI PCI = Payment Card Industry VISA American Express MasterCard Worldwide Discover Financial Services JCB International –Together they formed the PCI Security Standards Council 4

© Vendor Safe Technologies 2008 W HAT I S PCI/DSS PCI DSS = Payment Card Industry Data Security Standards Designed to STOP computer hackers! –Data Breach –Theft of Cardholder Data –Fraud –Financial Loss to merchants Compliance is MANDATORY: –To avoid fines and penalties –Safeguard locations against hackers 5

© Vendor Safe Technologies Required to Complete - PCI Self Assessment Questionnaire 200+ Questions to Address Across THREE CRITICAL COMPONENTS

© Vendor Safe Technologies 2008 Policies & Procedures NetworkSecurity Data Access 7 BECOMING COMPLIANT CAN BE A DAUNTING TASK

© Vendor Safe Technologies 2008 Our Solution PCI MANAGED SECURITY SUITE Provided by New Haven Cash Register and VendorSafe™ Our Solution PCI MANAGED SECURITY SUITE Provided by New Haven Cash Register and VendorSafe™

© Vendor Safe Technologies 2008 VendorSafe™ PCI Managed Security Suite 1.Global Security Mesh™/VPN  Managed Firewall with Security Services 2.Wi-Fi HotSpot Plus ™ Up to four secure wireless networks per location 3.TrustVault™ Certificate  $50K Guarantee per location 9

© Vendor Safe Technologies 2008 VendorSafe™ GLOBAL SECURITY MESH™/VPN  VPN Architecture Benefits  Hierarchical VPN Architecture All end users on same network Support Staff can easily access remote locations  True two-factor authentication Required by PCI-DSS  No need to remember or distribute IP addresses  Reduction in liability involving terminated support staff 10

© Vendor Safe Technologies 2008 VendorSafe™ GLOBAL SECURITY MESH™/VPN  Managed Firewall  Auto Broadband Backup Credit card processing stays online Minimizes support calls  Security policy and management Block incoming and outgoing internet traffic  Gateway Logging Compliant logging for communication records 11

© Vendor Safe Technologies 2008 VendorSafe™ GLOBAL SECURITY MESH™/VPN  Managed Firewall (continued)  Forced Configuration Manager™ Ensures secure communications  Rogue Device Manager™ Keeps hackers out of your system  IP Data Blocker™ Prevents data transfer to any unauthorized IP address 12

© Vendor Safe Technologies 2008 VendorSafe™ Wi-Fi HOTSPOT PLUS  HotSpot Features:  Four Separate Wireless Networks - Public / Private Segregation  Encrypted Communications  Contains all necessary Infrastructure for Wireless POS devices / Handhelds  VendorSafe™ Bandwidth Q.O.S. Manager - Dynamically allocates resources  URL Web Filtering Family Friendly Wi-Fi Browse by Category 13

© Vendor Safe Technologies 2008 VendorSafe™ TRUSTVAULT™ CERTIFICATE  The VendorSafe Guarantee: Covers up to $50,000 in direct expenses relating to a data breach including: Mandatory security audit Card replacement fees Fines and penalties, ex. VISA  Covers physical or electronic data breach at EVERY merchant location 14

© Vendor Safe Technologies 2008 WHEN A BREACH OCCURS  Merchant Expenses:  Mandatory Forensic Audit - $10 to $20K  Fines for Non Compliance  VISA - up to $500K  MasterCard – up to $200K  Credit Card Replacement $25.00 per card  Risk to Brand Equity - Priceless $50K+ to Recover from a Breach 15

D ID YOU READ THE FINE PRINT ? Merchants have already agreed to be PCI Compliant ! Merchants have already agreed to be PCI Compliant !

D ON ’ T BECOME A VICTIM !

New Haven Cash Register Selling and Supporting POS Solutions Since 1949

New Haven Cash Register Company 2546 State Street Hamden, CT ext New Haven Cash Register Selling and Supporting POS Solutions Since 1949 Since 1949 New Haven Cash Register Company has provided point of sale & cash register systems to Ct based restaurant and retail businesses. Every sale is personalized to meet customer specific requirements by providing a full range of implementation(configuration, installation, training, go-live standbye), software support and on-site services.. Whether it is a robust point of sale solution or less sophisticated cash register system New Haven Cash Register can recommend the product that best meets your requirements & budget. Every system is fully programmed and properly configured which reduces your learning curve and start up problems. Call today for the right system- the first time Are you processing credit cards with your POS system? If you are, then you know you must use a PCI compliant version or risk a major fine from the credit card industry should a security breach occur. New Haven Cash Register provides PCI compliant solutions.

I N THE NEWS