THE THREATVIEW MICROASSESSMENT
The eCommerce industry continues to be a prime target for criminal activities within the payment sector, with fraud losses due to compromised eCommerce payment card data exceeding $1 billion.
WHAT IS THE THREATVIEW MICROASSESSMENT?
The ThreatView microAssessment is designed, in partnership with the card brands, to assist acquiring institutions and/or processors in providing a rapid response for their breached merchants – to secure their online businesses and protect their customer data.
As a reactive, investigative, and protective measure, the ThreatView microAssessment is quick, simple to use and highly effective, while also being affordable to merchants. Our main goal is to encourage a proactive security approach and swiftly restore merchant websites, ensuring they can effectively serve their customers.
THE ACQUIRER / PROCESSOR STEPS
Getting started with the ThreatView microAssessment process is simple and quick.
These are the 5 steps in the process:
-
Contact Turaco Labs to get an account on ThreatView.
-
Initiate a new microAssessment case with card brand case ID.
-
Send the merchant the invitation link to start the microAssessment.
-
Once the merchant engages with the microAssessment, you can keep track of the case in real-time.
-
Access the microAssessment report at any time.
Throughout the process the ThreatView Support team is on standby to assist with any queries.
THE MERCHANT STEPS - MICROASSESSMENT
As a merchant required to undergo the ThreatView microAssessment, the process is simple and quick, involving the following steps:
-
Merchant receives invitation link from acquirer/processor, or applies via form in the "Get Started With a microAssessment" button below and receives a link from Turaco Labs once the microAssessment has been set up (usually within an hour).
-
Follow the link, and enroll for the microAssessment at the low cost of $895.
-
Follow the ThreatView Wizard steps to deploy the ThreatView technology to the affected website.
-
ThreatView immediately analyzes the website for signs of intrusion and provides guidance on findings.
-
Once ThreatView detects that the site is "clean" and secured, the microAssessment report is autogenerated for the acquirer/processor to provide the card brands.
The ThreatView microAssessment provides a "paint-by-numbers" simple approach to identifying the security issues, remediating them and then protecting the website from further criminal activity.
Throughout the process the ThreatView Support team is on standby to assist with any queries. Included with the microAssessment is 90 days of ThreatView Advanced security monitoring and protection for the merchant's eCommerce website.
THE MERCHANT STEPS - MICROASSESSMENT+
In approximately 17% of cases—based on over 3 years of investigation data - the ThreatView microAssessment may yield inconclusive results. For instance, if a site has been compromised using a Zero Day, this situation might not be detectable through the standard solution.
In such cases, we offer the microAssessment+ service, which involves manual analysis by a forensic expert. The merchant incurs a one-time fee of $450 for this detailed analysis, along with a brief report summarizing the findings.
THE MICROSASSESSMENT BACKGROUND
Traditional PCI Forensic Investigations, while being led by extremely experienced and capable investigators, are manual, expensive and unable to scale to meet the growing eCommerce threatscape.
Mastercard approached Turaco Labs with a concept to build a lighter, quicker, technology-led solution that can scale to meet the growing eCommerce malware infection issues. The solution was then reviewed and adjusted by Visa and American Express.
The microAssessment is 100% Turaco Labs owned technology (built on ThreatView Advanced Edition) and supported by the Turaco Labs team.
The solution is used globally to help eCommerce businesses quickly regain controls of their online businesses, while meeting the card brands' requirements for reporting, Post Incident Monitoring - and assisting the merchant in meeting key PCI DSS controls (PCI 5.2, 6.4.3, 11.5.2 and 11.6.1).