|
NonStop ™ Newsletter for November 2021 ______________________________________________ Current Global Subscribers 15,658 Click to Sponsor a Newsletter Contents Hewlett Packard Enterprise and 4tech Software .... Gravic Presented at Virtual CTUG and Newsletters Migration Services Preparing Your Payments Infrastructure for the Next Decade: .... NuWaves API Security Guide - Best Practices for REST Services Bite Sized eBITUG Ask TandemWorld
XYPRO - Best of NonStop 2021 Get ready for Next Gen Payments Monitoring Amazon flexes its muscle. Join CSP’s Virtual Presentation on Thursday, December 9 Simplifying Access to Legacy Payments Applications
|
||||||||||
|
Hewlett Packard Enterprise and 4tech Software sign global sales, distribution and support partnership agreement London, 27th October 2021. For over a decade 4tech Software Limited (4tech) has been a Business, Alliance and Technology partner with Hewlett Packard Enterprise (HPE). Today we’re pleased to share news of a strengthening of that partnership by announcing HPE as our primary global sales, distribution and support partner.
4tech’s existing security/compliance solutions; PANfinder and Integrity Detective will be available via your HPE NonStop representative with immediate effect, with support via HPE’s excellent GNSC service as you would expect. PANfinder (PF) is the cornerstone of any PCI-DSS compliance project. PF has consistently located sensitive payment card data being inadvertently stored outside of defined cardholder data environments. After its initial reports and remedial actions being carried out, PF continually searches HPE NonStop servers for readable sensitive payment card data, highlighting problems as they occur and providing valuable proof of ongoing compliance. Integrity Detective (ID) is the most comprehensive file and subsystem configuration integrity monitor available for the HPE NonStop today. ID provides continuous (real-time) monitoring and reporting of your HPE NonStop files, objects and subsystem configurations. So if something changes and your system security is compromised, an alert will be generated and you’ll be able to take immediate action. “I don’t want people to think HPE is simply offering alternatives to existing solutions with this partnership” said Sean Bicknell, Sales Director, 4tech, “with HPE offering 4tech’s solutions, they’re adding products with functionality never previously available via HPE. NonStop users will now find it even easier to improve security on their NonStops with 4tech’s best of breed products”. “4tech’s solutions have been developed with the end user and their specific job function in mind” added Greg Swedosh, Technical Support Director and CISO at 4tech, “our solutions are quick and easy to install and configure, with exactly the right level of functionality to allow you to effectively do your job, while quickly achieving regulatory compliance”. for More information Contact Us
Gravic Presented at Virtual CTUG and APAC TBC on
At the CTUG Virtual Session held at the end of October, and the HPE NonStop APAC Technical Boot Camp held in mid-November, Gravic presented on HPE Shadowbase – New Features and Product Solutions. We discussed HPE Shadowbase Zero Downtime Migration architectures and techniques along with data integrity problems that can be fixed with HPE Shadowbase Compare and Repair. We also provided a short review of new HPE Shadowbase features and enhancements, releases/SPRs, and discussed new features on the horizon. We will also be delivering similar material (with updates) at the Bite-Sized eBITUG Virtual Conference on December 9. Please contact us if you would like us to send or present this material to you and/or your team.
Please Visit New HPE
Shadowbase Web Page on
Please visit our new web page, Business Continuity FAQs: Frequently Asked Questions Regarding System Recovery or watch this video (recorded at the recent Connect TBC event), for a recap of our answers to the following questions: 1. Has Gravic ever been involved with helping a customer recover its system after a significant disaster? If so, what was the worst part of the recovery? 2. Are there any differences in the effort to recover an environment using ENSCRIBE, SQL/MP or SQL/MX? If so, what are they?3. What is the biggest advantage of using a data replication product like Shadowbase software to recover data vs. virtual tape?
Hewlett Packard Enterprise globally sells and supports Shadowbase solutions under the name HPE Shadowbase. For more information, please contact your local HPE Shadowbase representative or visit our website. For additional information, please view our Shadowbase solution videos: https://vimeo.com/shadowbasesoftware.
Specifications subject to change without notice. Trademarks mentioned are the property of their respective owners. Copyright 2021.
Newsletters Missed a Newsletter? Catch Up Here Find out about Tandemworld
Migration Services
Preparing Your Payments Infrastructure for the Next Decade: A Guide for Financial Services Institutions- Whitepaper
Read the entire article by visiting https://www.lusispayments.com/marketinsights
Brian Miller
NuWaves API Security Guide - Best Practices for REST Services REST has become the standard for information exchanged between disparate platforms and applications within the enterprise. In the NonStop space, it is being used more and more, to allow NonStop applications to communicate with other enterprise applications, and integrate with solutions outside the enterprise.
In these environments security is critical. In this article, we explain some of the best practices to consider to help protect your sensitive data and applications, while still making them easily accessible to your internal and external business partners that require access. We’ll also give some real-world examples showing how LightWave ServerTM and LightWave ClientTM users are doing exactly that.
When implementing a secure REST services strategy, one must consider the following items as part of your best practices. ● Network isolation ● Protection of sensitive data in transit and at rest ● Authentication ● Authorization ● Access control ● Auditing
We will elaborate on these best practices, with a goal of assisting those interested in the deployment of secure REST services. Not all of these security points will be required in every instance, but all should be considered. Specific organizations may have additional requirements that should be discussed with the organization's security team.
Bite Sized eBITUG With the ongoing uncertainties around the COVID Pandemic, the BITUG
Committee has decided to cancel the face-to-face BIG SIG event we
usually host in December. THERE IS STILL TIME TO REGISTER BUT BE QUICK!
All the details including registration
links can be found at the BITUG Website. Please feel free to pass this email along to other colleagues or friends who might be interested.
Ask TandemWorld
XYPRO - Best of NonStop 2021Have we become numb to the news of security breaches? Unfortunately, the attacks on our businesses, personal lives and even global infrastructure are not slowing down. Cybercrime is up over 600% during the pandemic. According to Verizon’s 2021 Data Breach Investigation Report, 61% of cyberattacks targeted credential theft. This far surpasses personal, banking and payment card information which have been primary targets for years. The cybersecurity industry has responded with a variety of ways to protect sensitive data with regulations, technology and awareness, which has forced attackers to look for easier targets, such as usernames and passwords. COVID-19 phishing scams continue targeting remote workers isolated from their day-to-day environments, making it easier to breach technical defences and compromise credentials. The good news? There is one simple, yet powerful action that can ensure 99.9% effectiveness against credential theft - implement multi-factor authentication (MFA). MFA adds a second factor to the authentication process before access is granted. This can be a key fob, token, short code or biometrics. There is no better time to implement multi-factor authentication across your critical applications, servers and services because frankly, if it's not there, then you’re already late. If we continue to delay, time will pass and there will be no excuses left, only breaches that could have been prevented. To read the rest of this article click here Get ready for Next Gen Payments Monitoring
- Introducing - C-Deep for HPE NonStop Get real-time monitoring and comprehensive querying of the transaction flow information created by primary payment engines. Get significant cost savings against your current transaction monitoring solution. Get critical information that can improve business performance, enhance SLA's and increase customer satisfaction. WHAT IS C-Deep? C-Deep for HPE NonStop enables payment processors to get instant information on any transaction processed through a payment switch on HPE NonStop - past or present. It's easy to install and operates out of the box with BASE24™ Classic or customize C-Deep to work with any major payment engine with PointNext professional services
Simple, straightforward architecture. C-Deep reads transaction data from the HPE NonStop based Transaction Log File/POS Transaction Log File (TLF/PTLF). The HPE NonStop extraction clients pass this data to the C-Deep collector on a Windows Server. All data processing and analysis takes place on the Windows Server to minimize resource usage on the HPE NonStop.
Amazon flexes its muscle. How many customers do you think Amazon has in the UK? A recent figure puts it at a massive 90% of all shoppers, with 70% visiting Amazon at least once a month. The UK e-commerce market is the 3rd largest in the world, after China and the USA. Amazon boasts 77 fulfilment centres across Europe with 21 of those in the UK. If you’ve been lucky enough to drive on the M1 motorway recently, you’ll have seen the size of their distribution warehouse. And 63% of the young (aged 16-24) have access to Amazon prime, either themselves directly or via their household account.
So with this kind of size, we should not be surprised when Amazon starts to flex some muscle. The recent news that they will no longer continue to accept Visa credit cards beyond January 19, 2022 may have something to do with that size. But what is really behind this story? Is Amazon endangering its own business? Is the debate over transaction costs really driving this announcement? What conversations took place with Visa before this announcement? Has Amazon itself grown so big that it can dictate policy to card issuers? What about Amazon’s own card-issuing partnership with Mastercard? Customers are unlikely to rank their loyalty to Visa higher than Amazon. Visa’s share price dropped 5% on the news whereas Amazon’s barely moved. So the market clearly thinks Visa will blink first, and fortunately there ’s still time for Amazon and Visa to resolve this issue between themselves.
Let’s take a look at some other recent announcements concerning both Visa and Mastercard fees and examine the truth. Bambora, a Swedish-based acquirer now part of Worldline, has published both Visa and Mastercard revised interchange fee policies that kicked in mid October 2021. Both schemes are raising their rates for interregional card-not-present transactions, so a UK-issued credit card used to purchase in the EU now face hikes from 0.3% to 1.5%. Debit cards are slightly less at just 1.15%. Note that Card-Present physical shop transactions remain unaffected. Visa’s changes are broader; they additionally encompass EEA-issued cards transacting online in the UK. So Visa’s changes are bilateral, and apply for all credit card customers purchasing cross-border. Given that Amazon’s model is very much a cross-border purchase and fulfilment business, these cross-border fees are likely to hit their merchants hard, and could likely fuel price rises. Amazon would certainly like to encourage more consumers to take up its own credit card, and I’m sure many will. However those consumers with debit cards will appear to be unaffected by this announcement. Visa Debit cards will still be accepted at Amazon stores. Add to this, Amazon’s recent partnership and adoption of Affirm’s Buy-now-Pay-Later scheme is likely to be rolled out in the UK pretty soon, offering consumers yet more choice and more comfortable payment options. For our part, OmniPayments helps e-commerce acquirers both large and small to acquire transactions at the lowest possible cost, maximising revenues for the institutions who use us. Better still , you can up and running in no time at all. OmniPayments private Cloud service "OmniCloudX" brings you a ready-and-waiting powerful switch to process your transactions from as little as $5,000 per month.
Join CSP’s Virtual Presentation on Thursday, December 9
CSP is proud to be a presenter at the 2021 Bite-Sized eBITUG virtual event. CSP's General Manager, Henry Fonseca, will show you how to effectively secure your critical applications using CSP's new cloud-native solution for multi-factor authentication, which now supports High availability, Kubernetes Deployments, and additional features. CSP will also present the new enhancements to CSP Authenticator+®, our multi-factor authentication solution built for universal Application and System (TACL and OSS) access. CSP Authenticator+ allows security administrators to easily implement one or several authentication methods, including token-based systems such as RSA or similar providers. We are very excited to show the NonStop community what we have been developing over the past year. For more information visit the BITUG website.
CSP - Compliance at your Fingertips® For complimentary access to CSP-Wiki®, an extensive repository of NonStop security knowledge and best practices, please visit wiki.cspsecurity.com
Simplifying Access to Legacy Payments Applications
How can the use of APIs be leveraged by HPE NonStop users? NuWave offers two HPE NonStop-based products that can help users to take advantage of the growing use of APIs. . LightWave ServerTM allows NonStop payment engines and other applications to be securely and easily exposed as REST-based Web services. LightWave ClientTM allows NonStop applications, including payment applications, to quickly and easily access REST-based Web services outside the NonStop--either within the enterprise or external to the business.
Find out more about us at www.tandemworld.net
|
|
|||||||||
|
+44 (0) 20 8304 7979 Our company, Tandemworld,
accepts no liability for the content of this email, or for the
consequences of any actions |
