
A business wouldn’t be a business if at some point along the line it wasn’t taking a payment for it’s goods and services provided.
The problem however, is that when a customer pays for said goods and services, in order to make the service fast and seamless, often, their payment card data is retained by the merchant taking the payment.
When a business only has 100-200 recurring customers, storing this data is usually done in secured encrypted databases. Which is fine, but what about when you have 1000-2000 recurring customers? or more? Is it still fine to store the payment card data in a secured database? It starts to raise all sorts of questions. Who has access to the data? Are they trusted? What if they leave the business?
This doesn’t even begin to raise the big question. What happens if you get hacked? We have all heard the stories about the big businesses leaking customer data onto the internet. There is a massive media outcry, then it all dies down a few months later. What has been done to secure the systems which were compromised? More often than not, that response is never given.
I believe the solution is to use a cloud service provider who is PCI-DSS compliant. The payment card details never hit the merchant environment, therefore you can be certain, should the worst happen, and your systems are compromised, the hackers/social engineers/untrustworthy achieve nothing because there is nothing for them to take.
Eckoh (Http://www.Eckoh.com) achieve this by utilising their CallGuard product.
CallGuard – The Best Option Available
At Eckoh, we firmly believe that CallGuard is the best and the most flexible option available to any organization that wants a secure and PCI DSS compliant call center. And here’s why:
- It works with any call recording and phone system regardless of IT systems, or the payment processing engine used to take card payments
- There’s a quick and simple set-up option which means we can get you up and running fast
- There’s a fully hosted option which means you can outsource the PCI compliance headache to us.
- The customer is never put on hold or transferred to an IVR, so your agents can continue talking throughout the transaction process, delivering optimum customer service.
- Call center agents can take customer payments without being exposed to card details
- Secures all or parts of your call center – depending on what you want to remove from PCI scope
- It uses DTMF masking or audio tokenization