{ "docId": "019dd923-5de0-76bd-a168-d0984f387fb5", "docSlug": "f7275e434f5f1b04", "documentTitle": "The Global State of Information Security® Survey 2018 Singapore highlights", "authorId": "PwC", "authorName": "PwC", "documentKindSlug": "consulting-deck", "documentKindLabel": "Consulting deck", "sourceTypeSlug": "strategy_consulting", "sourceTypeLabel": "Strategy consulting", "presentationDate": null, "orientation": "portrait", "aspectRatio": 0.707, "pageNumber": 14, "pageCount": 36, "prevPage": 13, "nextPage": 15, "slideType": "industry_trends", "function": "summarize", "density": "overcrowded", "nDataPoints": 6, "notes": "The slide includes a bar chart showing percentages of organizations addressing specific mobile payment security issues.", "elementsJson": [ "paragraph", "bar_chart_horizontal", "photo" ], "metadataConfidence": 1, "imagePath": null, "slideHref": "/slides/019dd923-5de0-76bd-a168-d0984f387fb5/14", "deckHref": "/decks/019dd923-5de0-76bd-a168-d0984f387fb5", "deckJsonHref": "/decks/019dd923-5de0-76bd-a168-d0984f387fb5.json", "deckAnchorHref": "/decks/019dd923-5de0-76bd-a168-d0984f387fb5#slide-14", "components": [ { "bbox": null, "kind": "callout", "text": "If there is one thing that you need to look at both security and user experience, the winners in the marketplace are going to be those that strike the best balance between the two.", "attrs": null, "subkind": null, "toolName": "Visual emphasis", "toolSlug": "visual-emphasis", "confidence": null, "componentId": "019dd952-3beb-760d-a9ed-cd553d8000a7", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.25, "w": 0.52, "x": 0.07, "y": 0.62 }, "kind": "chart", "text": "Risks related to malware/malicious apps: 57%; Risks related to hardware/device platforms: 45%; Verification/provisioning processes to reduce fraud: 45%; Protection of customer personal data: 43%; End-user risks & vulnerabilities: 42%", "attrs": null, "subkind": "bar-horizontal", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "59990e56-0f57-4b6d-b6c5-9790885bc991", "frameworkName": null, "frameworkSlug": null }, { "bbox": null, "kind": "metric", "text": "Percentage of respondents: 57%", "attrs": null, "subkind": "primary", "toolName": "Quantification", "toolSlug": "quantification", "confidence": null, "componentId": "019dd952-3beb-760d-a9ed-d5111e1d1be4", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.32, "w": 0.86, "x": 0.07, "y": 0.22 }, "kind": "paragraph", "text": "This year, 57% of survey respondents said they have adopted mobile payment systems. While mobile payments is already mainstream, the ecosystem continues to rapidly evolve as new partnerships are formed among a constellation of technology, financial, retail and telecommunications firms. This shifting environment will likely bring unanticipated cybersecurity threats and broaden the cyberattack vector. Risks can result from new technologies as well as processes, as demonstrated during the high-profile rollout of the Apple Pay service in the US. \"Some of the initial challenges [of Apple Pay] weren't necessarily issues with the physical or logical security of the phone or the credentials, but rather the process around enrollment,\" said LoBianco of CIBC. \"When you have these new payment models, you have to look at the end-to-end lifecycle of enrolling a user, transactions that flow through the system and de-enrolling users. When there are new processes, the bad guys will try to exploit human weaknesses just as much as technological weaknesses.\" Mobile payment technologies that transmit a token to merchant systems are considered fundamentally secure because no credit card information is stored on the device or transmitted to retailer point-of-sale systems. But some believe smartphone-based payments are only an incremental step toward the future of transactions. Truly innovative mobile payments completely remove the payment process from the user experience, according to Sacchi of Global Payments, who cites the seamless process used by ride-hailing service Uber as a game-changer. The merchant uses a payment card on file, and customers' cards are automatically billed. \"Uber has essentially made the payment step disappear from the entire user experience: You take your ride, you leave the car and you're done,\" said Sacchi. \"If there is one thing that is a takeaway from all this, it's that you need to look at both security and user experience. The winners in the marketplace are going to be those that strike the best balance between the two.\"", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "8194af7b-7bb2-4508-9b6c-36842915b2be", "frameworkName": null, "frameworkSlug": null }, { "bbox": null, "kind": "quote", "text": "If there is one thing that you need to look at both security and user experience, the winners in the marketplace are going to be those that strike the best balance between the two. — Sacchi of Global Payments", "attrs": null, "subkind": null, "toolName": "Authority citation", "toolSlug": "authority-citation", "confidence": null, "componentId": "019dd952-3beb-760d-a9ed-d02f2b4dfc0e", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.02, "w": 0.86, "x": 0.07, "y": 0.91 }, "kind": "source-note", "text": "12 Turnaround and transformation in cybersecurity: Key findings from The Global State of Information Security® Survey 2016", "attrs": null, "subkind": null, "toolName": null, "toolSlug": null, "confidence": null, "componentId": "c220a1cf-112f-4cf9-ba1d-c5e87bb924b9", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.04, "w": 0.25, "x": 0.07, "y": 0.17 }, "kind": "title", "text": "Going mobile with payments", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "6ec7e5a5-5fb0-4a56-b4fb-86ff4ae3da46", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.03, "w": 0.86, "x": 0.07, "y": 0.56 }, "kind": "title", "text": "Issues organizations are addressing to improve mobile payments security", "attrs": null, "subkind": "subtitle", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "3999cfda-dab2-4228-abe8-ef92fd63c6e2", "frameworkName": null, "frameworkSlug": null } ], "metrics": [], "tools": [ { "name": "2x2 matrix", "slug": "matrix-2x2", "agent": null, "layer": "slide", "matchId": "1aed5529-f8d7-47c3-a6c5-a60e014fb5e2", "evidence": "Risks related to malware/malicious apps: 57%; Risks related to hardware/device platforms: 45%; Verification/provisioning processes to reduce fraud: 45%; Protection of customer personal data: 43%", "confidence": 0.8 } ], "frameworks": [], "arcBeats": [ { "to": 20, "from": 10, "beatId": "ef22f6aa-f227-4788-b8b3-eaf8b25e7e98", "arcName": "The Consultant's Gambit", "arcSlug": "consultants-gambit", "beatName": "Evidence & Proof", "beatSlug": "consultants-gambit-evidence-proof", "evidence": "The document presents various statistics and trends to support its findings", "position": 2, "confidence": 0.8, "parentBeatName": "Evidence", "parentBeatSlug": "evidence" } ], "loops": [ { "to": 14, "from": 13, "name": "Cost Of Inaction", "slug": "27-cost-of-inaction", "bestFor": "Urgent budget requests, compliance, risk mitigation", "matchId": "d8e3cc75-d3b5-4f2d-b3ae-72d368e4601f", "evidence": "The document presents data on incident-related losses covered by cybersecurity insurance", "position": 0, "objective": "Highlight the consequences of not addressing cybersecurity risks", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "confidence": 0.6, "description": "Quantify what happens if the audience does nothing" } ], "imagePathAlt": null, "thumbSrc": null, "thumbSrcAlt": null, "locked": true }