Month: September 2017

SecurityMetrics offers a simplified explanation of the Self-Assessment Questionnaire (SAQ). When you start your questionnaire a video can be found alongside the questions in each section. By playing the video each section is explained in easy to understand language and an option is available to confirm your agreement. Upon confirming, all questions in that section will be answered with a single click. Click here to read the document “Filling Out Security Metrics SAQ”.

If you need help from SecurityMetrics and wish to contact them directly be sure you mention that you are a Bookstore Manager Software user. This eliminates any confusion and will help them assist you more thoroughly. You will not need to make any payment to SecurityMetrics directly. All invoicing is done through Bookstore Manager.

If you haven’t had a chance to, you can still enroll at www.securitymetrics.com/pcidss/bsmgr

Your BSMGR Sales Team
sales@bsmgr.com | (800) 997-6724 (option 1)

P.S. If you missed any of our FAQ series last week, you can read them (1 of 4) here, (2 of 4) here, (3 of 4) here, and (4 of 4) here.

In August we sent you an email to let you know that we had partnered with SecurityMetrics to provide you with access to an online Self-Assessment Questionnaire and Quarterly Scans to help you be compliant with the Payment Card Industry Data Security Standards (PCI DSS).

You may have completed these tasks with your payment processing provider. You may have forgotten this was a requirement of all merchants who accept credit and debit cards and have not completed this important task. Either way, SecurityMetrics offers an inexpensive and simple alternative to help you meet this requirement.

As we’ve helped answer questions that have come in over the past few weeks, a few have been quite common. We are sending a sequence of four (4) emails to address these common questions for everyone.

Question 4

Is this really a big deal?

Answer

If you have never completed an SAQ or had your system (store) scanned for vulnerabilities, your processor is probably charging you a non-compliance fee. This fee is typically $19.95 per month but some processors have been known to charge as much as $35.00 per month. The only way to remove this fee from your processing statement is to fulfill the PCI DSS requirements (fill out the SAQ and have a security scan done by a recognized third-party company). SecurityMetrics gives you a chance to start saving this fee.

To enroll visit www.securitymetrics.com/pcidss/bsmgr

We’ve created a tech doc to show you the easiest way to accurately complete the Self-Assessment Questionnaire. Click here to read the document “Filling Out Security Metrics SAQ”.

Your BSMGR Sales Team
sales@bsmgr.com | (800) 997-6724 (option 1)

P.S. If you missed the first question, you can read it and the answer here.

P.P.S. If you missed the second question, you can read it and the answer here.

P.P.P.S. If you missed the third question, you can read it and the answer here.

In August we sent you an email to let you know that we had partnered with SecurityMetrics to provide you with access to an online Self-Assessment Questionnaire and Quarterly Scans to help you be compliant with the Payment Card Industry Data Security Standards (PCI DSS).

You may have completed these tasks with your payment processing provider. You may have forgotten this was a requirement of all merchants who accept credit and debit cards and have not completed this important task. Either way, SecurityMetrics offers an inexpensive and simple alternative to help you meet this requirement.

As we’ve helped answer questions that have come in over the past few weeks, a few have been quite common. We are sending a sequence of four (4) emails to address these common questions for everyone.

Question 3

Do I have to use SecurityMetrics?

Answer

While you are not required to use SecurityMetrics for PCI compliance, we suggest you seriously consider the advantages. Between the larger, $100,000.00 indemnification, the simplification of the SAQ (especially in future years), the ease of scheduling the scans, and lower pricing it is one of the best options for fulfilling your compliance requirements.

To enroll visit www.securitymetrics.com/pcidss/bsmgr

Your BSMGR Sales Team
sales@bsmgr.com | (800) 997-6724 (option 1)

P.S. If you missed the first question, you can read it and the answer here.

P.P.S. If you missed the second question, you can read it and the answer here.

In August we sent you an email to let you know that we had partnered with SecurityMetrics to provide you with access to an online Self-Assessment Questionnaire and Quarterly Scans to help you be compliant with the Payment Card Industry Data Security Standards (PCI DSS).

You may have completed these tasks with your payment processing provider. You may have forgotten this was a requirement of all merchants who accept credit and debit cards and have not completed this important task. Either way, SecurityMetrics offers an inexpensive and simple alternative to help you meet this requirement.

As we’ve helped answer questions that have come in over the past few weeks, a few have been quite common. We are sending a sequence of four (4) emails to address these common questions for everyone.

Question 2

How do I answer the SAQ?

Answer

If you have never completed a Self-Assessment Questionnaire (SAQ), you may feel a little overwhelmed by the questions on the form. Keep in mind that the Bookstore Manager system does not store any cardholder information on your computer. In fact, with the EMV feature, cardholder information does not pass through the POS at all. You can confidently answer in the affirmative in this section of the SAQ.
The areas of the questionnaire that will need your special attention are in regards to how you handle card information that is recorded on paper, typed into a non-BSM program (such as Word, Excel, or Outlook), or is otherwise stored on a computer or file drawer. In these circumstances, you will need the employ the necessary protections to secure the cardholder’s information or destroy the cardholder data after valid use.

To enroll visit www.securitymetrics.com/pcidss/bsmgr

Your BSMGR Sales Team
sales@bsmgr.com | (800) 997-6724 (option 1)

P.S. If you missed the first question, you can read it and the answer here.

In August we sent you an email to let you know that we had partnered with SecurityMetrics to provide you with access to an online Self-Assessment Questionnaire and Quarterly Scans to help you be compliant with the Payment Card Industry Data Security Standards (PCI DSS).

You may have completed these tasks with your payment processing provider. You may have forgotten this was a requirement of all merchants who accept credit and debit cards and have not completed this important task. Either way, SecurityMetrics offers an inexpensive and simple alternative to help you meet this requirement.

As we’ve helped answer questions that have come in over the past few weeks, a few have been quite common. We are sending a sequence of four (4) emails to address these common questions for everyone.

Question 1

Do I have to change processors?

Answer

SecurityMetrics is separate from your processor. If you use NPC or another processor, you will continue with that relationship. SecurityMetrics only assists in helping you fulfill your requirements to be PCI DSS compliant.

To enroll visit www.securitymetrics.com/pcidss/bsmgr

Your BSMGR Sales Team
sales@bsmgr.com | (800) 997-6724 (option 1)