Ukuphepha kwedijithali kusanda kuthola imithetho emisha, futhi izinkampani ezicubungula idatha yekhadi zidinga ukuzivumelanisa nezimo. Ngokufika kwenguqulo 4.0 ye-Payment Card Industry Data Security Standard (PCI DSS), eyasungulwa yi-PCI Security Standards Council (PCI SSC), izinguquko zibalulekile futhi zinomthelela oqondile ekuvikelweni kwedatha yekhasimende kanye nendlela idatha yokukhokha egcinwa, icutshungulwa, futhi idluliselwe ngayo. Kodwa yini ngempela eshintshayo?
Ushintsho olukhulu luyisidingo sezinga eliphakeme nakakhulu lokuphepha kwedijithali. Izinkampani kuzodingeka zitshale imali kubuchwepheshe obuthuthukile njengokubethela okuqinile kanye nokuqinisekiswa kwezinto eziningi. Le ndlela idinga okungenani izici ezimbili zokuqinisekisa ukuze kuqinisekiswe ubunikazi bomsebenzisi ngaphambi kokunikeza ukufinyelela kumasistimu, izinhlelo zokusebenza, noma ukuthengiselana, okwenza ukugebenga kube nzima kakhulu, ngisho noma izigebengu zithola ukufinyelela kuphasiwedi noma idatha yomuntu siqu.
Phakathi kwezinto ezisetshenziswayo zokuqinisekisa yilezi:
- Into ethile ayaziyo umsebenzisi : amaphasiwedi, amaphinikhodi, noma izimpendulo zemibuzo yokuphepha.
- Okuthile umsebenzisi anakho : amathokheni aphathekayo, i-SMS enamakhodi okuqinisekisa, izinhlelo zokusebenza zokufakazela ubuqiniso (njenge-Google Authenticator), noma izitifiketi zedijithali.
- Okuthile umsebenzisi : i-biometrics yedijithali, yobuso, yezwi noma ye-iris.
“Lezi zingqimba zokuvikela zenza ukufinyelela okungagunyaziwe kube nzima kakhulu futhi kuqinisekise ukuvikeleka okukhulu kwedatha ebucayi,” uyachaza.
"Ngamafuphi, sidinga ukuqinisa ukuvikelwa kwedatha yamakhasimende ngokusebenzisa izinyathelo ezengeziwe zokuvimbela ukufinyelela okungagunyaziwe," kuchaza u-Wagner Elias, i-CEO ye-Conviso, umthuthukisi wezixazululo zokuphepha kwezicelo. “Akuseyona indaba ‘yokuzivumelanisa nezimo lapho kudingekile,’ kodwa wukwenza ngokuvimbela,” egcizelela.
Ngaphansi kwemithetho emisha, ukuqaliswa kwenzeka ngezigaba ezimbili: eyokuqala, enezidingo ezintsha ezingu-13, yayinomnqamulajuqu ka-March 2024. Isigaba sesibili, esidinga kakhulu, sihlanganisa izidingo ezengeziwe ezingu-51 futhi kufanele zihlangabezane no-March 31, 2025. Ngamanye amazwi, labo abahluleka ukulungiselela bangase babhekane nezijeziso ezinzima.
Ukuze uvumelane nezidingo ezintsha, ezinye zezenzo ezibalulekile zihlanganisa: ukusebenzisa izindonga zomlilo kanye nezinhlelo zokuvikela eziqinile; ukusebenzisa ukubethela ekudluliselweni nasekugcinweni kwedatha; ngokuqhubekayo ukuqapha nokulandelela ukufinyelela nomsebenzi osolisayo; njalo ukuhlola izinqubo kanye nezinhlelo ukuhlonza ubuthakathaka; kanye nokudala nokugcina inqubomgomo yokuphepha yolwazi eqinile.
U-Wagner ugcizelela ukuthi, empeleni, lokhu kusho ukuthi noma iyiphi inkampani ephethe izinkokhelo zamakhadi kuzodingeka ibuyekeze sonke isakhiwo sayo sokuphepha kwedijithali. Lokhu kubandakanya ukubuyekeza izinhlelo, ukuqinisa izinqubomgomo zangaphakathi, kanye namathimba okuqeqesha ukuze kuncishiswe izingozi. "Ngokwesibonelo, inkampani ye-e-commerce izodinga ukuqinisekisa ukuthi idatha yamakhasimende ibethelwe ekugcineni futhi abasebenzisi abagunyaziwe kuphela abakwazi ukufinyelela olwazini olubucayi. Ngakolunye uhlangothi, uchungechunge lokudayisa luzodinga ukusebenzisa izindlela zokuqapha ngokuqhubekayo imizamo yokukhwabanisa okungenzeka kanye nokuvuza kwedatha, "uyachaza.
Amabhange kanye nama-fintech nawo azodinga ukuqinisa izindlela zawo zokuqinisekisa, andise ukusetshenziswa kobuchwepheshe obufana ne-biometrics kanye nokuqinisekiswa kwezinto eziningi. "Umgomo uwukwenza ukuthengiselana kuvikeleke kakhudlwana ngaphandle kokufaka engozini isipiliyoni samakhasimende. Lokhu kudinga ibhalansi phakathi kokuvikela nokusebenziseka, into umkhakha wezezimali obuthuthuke ngayo eminyakeni yamuva, "ugcizelela.
Kodwa kungani lolu shintsho lubaluleke kangaka? Akulona ihaba ukusho ukuthi ukukhwabanisa kwedijithali kuya ngokuya kuba yinkimbinkimbi. Ukuphulwa kwedatha kungaholela ekulahlekelweni kwezigidi zamaRandi kanye nomonakalo ongenakulungiseka ekuthembekeni kwamakhasimende.
UWagner Elias uyaxwayisa: "Izinkampani eziningi zisasebenzisa indlela yokusabela, zikhathazeka kuphela ngokuphepha ngemva kokuhlaselwa. Lokhu kuziphatha kuyakhathaza, njengoba ukwephulwa kwezokuphepha kungaholela ekulahlekelweni okukhulu kwezimali kanye nomonakalo ongenakulungiseka esithunzini senhlangano, okungagwenywa ngezinyathelo zokuvimbela."
Uphinde agcizelele ukuthi ukuze ugweme lezi zingozi, okubalulekile wukusebenzisa izinqubo Zokuphepha Kohlelo lokusebenza kusukela ekuqaleni kokuthuthukiswa kwesicelo esisha, ukuqinisekisa ukuthi isigaba ngasinye somjikelezo wokuthuthukiswa kwesofthiwe sesivele sinezinyathelo zokuvikela. Lokhu kuqinisekisa ukuthi izinyathelo zokuvikela zisetshenziswa kuzo zonke izigaba ze-software lifecycle, ebiza kakhulu kunokulungisa umonakalo ngemva kwesigameko."
Kuyaphawuleka ukuthi lokhu kuwumkhuba okhulayo emhlabeni wonke. Imakethe yezokuphepha yesicelo, ebilinganiselwa ku- $ 11.62 billion ngo-2024, kulindeleke ukuthi ifinyelele ku- $ 25.92 billion ngo-2029, ngokusho kukaMordor Intelligence.
U-Wagner uchaza ukuthi izixazululo ezifana ne-DevOps zivumela wonke umugqa wekhodi ukuthi uthuthukiswe ngezinqubo ezivikelekile, ngaphezu kwezinsizakalo ezifana nokuhlolwa kokungena kanye nokunciphisa ukuba sengozini. "Ukwenza ukuhlaziya okuqhubekayo kwezokuphepha kanye nokuhlola okuzenzakalelayo kuvumela izinkampani ukuthi zihambisane nemithetho ngaphandle kokuyekethisa ukusebenza kahle," uyagcizelela.
Ngaphezu kwalokho, izinsiza zokubonisana ezikhethekile zibalulekile kule nqubo, zisiza izinkampani ukuthi zizijwayeze nezidingo ezintsha ze-PCI DSS 4.0. “Phakathi kwezinsiza ezifunwa kakhulu i-Penetration Testing, i-Red Team, nokuhlolwa kokuphepha okuvela eceleni, okusiza ekuhlonzeni nasekulungiseni ubuthakathaka ngaphambi kokuba baxhashazwe yizigebengu,” echaza.
Njengoba ukukhwabanisa kwedijithali kuya ngokuya kuba yinkimbinkimbi, ukuziba ukuphepha kwedatha akuseyona inketho. "Izinkampani ezitshala imali ezindleleni zokuvimbela ziqinisekisa ukuvikelwa kwamakhasimende azo futhi ziqinise isikhundla sazo emakethe. Ukusebenzisa imihlahlandlela emisha, ngaphezu kwakho konke, isinyathelo esibalulekile sokwakha indawo yokukhokha ephephile futhi enokwethenjelwa," uphetha.
