E-commerce Insights: How to Secure Your Web Site Against Hackers

Questions to ask yourself:
• Do we store credit card numbers? Where? Why? Do we encrypt them?
• Do we store CVV2 values?
• Could we re-engineer our processes to serve customers without storing credit card numbers?

Have Your Web Site Regularly Scanned

One of the mandates set forth by security regulators is periodic scanning of your site by a certified testing service. Companies like ScanAlert and AlertSite can use automated robots to probe your Web site for potential security holes on a regular basis. Such holes typically are created by failing to correctly configure your Web servers, or by neglecting to keep your Web servers and their operating systems up-to-date with the most recent patches.