Remaining PCI-Compliant during the Festive Period

Increased Footfall & Card Transactions During the Festive Period: How to Remain PCI Compliant

As the festive season approaches, businesses across the globe are gearing up for a significant surge in consumer spending. According to recent data, holiday shopping and festivities contribute to a major spike in both in-store foot traffic and online card transactions. The global retail landscape is evolving, with consumers increasingly opting for digital payments for their convenience, security, and speed.

However, with this rise in transactions comes the increased risk of data breaches and cybercrime. The pressure to ensure the security of sensitive customer data during this busy period is higher than ever. This is where maintaining PCI compliance becomes crucial.

The Surge in Footfall & Card Transactions

During the 2023 festive period, both in-store and online shopping experienced a remarkable surge in activity:

• In-store footfall: Data from major retail analytics firms showed a 10-15% increase in foot traffic during the 2023 holiday season, compared to the previous year. People are returning to brick-and-mortar stores after the pandemic, drawn by special offers, holiday events, and the experiential shopping atmosphere that digital platforms can’t replicate.

• Online payments: The use of cards for online transactions soared in 2023. According to a study by the National Retail Federation, online sales during the 2023 holiday season increased by 14% year-over-year, with 61% of shoppers using cards for their purchases. The total value of holiday e-commerce transactions exceeded $100 billion globally, with credit and debit cards accounting for most of these purchases.

As consumers flock to both physical stores and e-commerce platforms to snap up the best deals, businesses need to stay vigilant. With more card transactions come greater risks of fraud and data breaches, which could lead to financial and reputational damage if not properly managed.

Why PCI Compliance is Crucial During the Festive Period

The Payment Card Industry Data Security Standard (PCI DSS) provides a comprehensive framework for protecting sensitive payment card information. It is not just a regulatory requirement for businesses that process credit card payments but also a critical part of safeguarding consumer trust and ensuring the integrity of payment systems.

The increasing volume of transactions during the festive period means that retailers, both online and offline, handle more sensitive data than usual. This can expose businesses to higher risks, including:

1. Data Breaches: Hackers target payment systems, especially during peak periods, when systems are more likely to be under strain or have vulnerabilities.

2. Fraudulent Transactions: Fraudsters are more active during the holidays, and payment card fraud often increases during high-volume shopping periods.

3. Reputational Damage: A single breach or security incident can permanently damage a business’s reputation, losing consumer trust and loyalty.

By maintaining PCI compliance, businesses can reduce the risk of such incidents and ensure they are taking necessary steps to protect customer data.

Key PCI Compliance Steps for Businesses

As we look toward 2024, businesses need to ensure they are up to date with PCI DSS requirements. While the specifics of PCI compliance can vary depending on the size and type of business, here are several best practices that should be implemented to remain compliant:

1. Ensure Secure Payment Systems

Businesses must ensure that their point-of-sale (POS) systems and e-commerce platforms are PCI compliant. This means using secure, encrypted systems to handle card payments and maintaining a secure network infrastructure. Encryption technologies like TLS (Transport Layer Security) and tokenisation help protect cardholder information, even if the data is intercepted.

2. Conduct Regular Security Audits

PCI compliance isn’t a one-time event. Businesses must regularly assess their payment systems and networks for vulnerabilities. Security audits should be conducted at least annually, but they are especially important during peak times, such as the festive season. Working with a PCI-certified security assessor can help ensure the business remains compliant and up to date with the latest standards.

3. Employee Training & Awareness

Staff training is an often-overlooked aspect of PCI compliance. Employees should be well-versed in the importance of data security, recognising phishing attempts, and understanding how to handle payment card information securely. Regular training sessions can help reduce human error, which remains a significant cause of security breaches.

4. Use Multi-Factor Authentication (MFA)

As part of the PCI DSS requirements, businesses must implement multi-factor authentication (MFA) for systems that handle sensitive data, such as employee access to payment systems. This extra layer of security ensures that even if an employee’s password is compromised, unauthorised access is still prevented.

5. Monitor & Maintain Logs

Effective monitoring and logging are essential for identifying and addressing potential security threats. Businesses must maintain comprehensive logs of all transactions and user activities related to payment processing. This allows for quick identification of any irregularities and helps ensure that sensitive data is handled appropriately.

6. Outsource with Caution

Many businesses choose to outsource certain aspects of their payment processing, such as handling credit card information. If you’re outsourcing any payment-related services, ensure that the third-party provider is also PCI-compliant. You may still be liable if a third-party vendor experiences a data breach, so it’s important to establish clear contractual terms and ensure their security standards align with your own.

7. Implement a Data Retention Policy

It’s crucial that businesses have clear guidelines on how long they retain payment card information. PCI DSS mandates that cardholder data should only be stored if necessary and for as long as needed. Having a data retention policy that includes regular purging of unnecessary or outdated payment information reduces the risk of a potential breach.

Predictions for 2024: What’s Next for PCI Compliance?

Looking ahead to 2024, businesses should expect the following trends regarding PCI compliance and payment security:

1. Increased Scrutiny on E-commerce Platforms: With e-commerce continuing to grow, especially in the wake of 2023’s online shopping surge, the PCI DSS will place more emphasis on securing digital platforms. Expect more robust enforcement around secure coding practices and ensuring that card-not-present transactions (online payments) meet compliance standards.

2. AI and Automation for Fraud Detection: Artificial intelligence and machine learning are playing an increasing role in identifying and preventing fraudulent transactions. In 2024, businesses are likely to adopt more advanced AI-driven systems to detect anomalies in card transactions in real time, providing an additional layer of fraud prevention.

3. Adoption of Contactless Payments: With consumers increasingly using contactless payments via mobile wallets and smart cards, businesses will need to ensure their systems are compliant with the latest standards in contactless security.

4. Stricter Enforcement and Penalties: As cybercrime continues to evolve, expect stricter enforcement of PCI DSS standards, with harsher penalties for non-compliance. Businesses should take proactive steps now to avoid potential fines and protect their brand reputation.

Conclusion

The festive period offers a significant opportunity for businesses to increase sales, but with the rise in transactions comes an increased need for robust security measures. Remaining PCI compliant is essential to protect sensitive payment data, prevent fraud, and maintain customer trust. By staying vigilant, conducting regular audits, and implementing the latest security measures, businesses can safeguard themselves and their customers as they navigate the busy holiday season and beyond. With 2024 on the horizon, now is the time to prioritise PCI compliance and ensure that your systems are prepared for the increased footfall and card transactions of the coming year.

End

About Evolve Business Group and Evolve

Evolve Business Group is an independently owned company that specialises in providing end-to-end IT and managed network solutions to a range of businesses. Evolve is helping businesses to reduce costs and simplify the management of services and give business owners and their teams more time to do what they do best.

Founded in 2005, it has worked with a variety of customers across different industries around the world, building a team of highly experienced specialists to help create effective and efficient packages using any combination of different offerings. It keeps a range of cross-sector networks protected and connected.

More News

Celebrating Women in Tech: Breaking Barriers and Shaping the Future

On International Women’s Day, we take a moment to celebrate the achievements of women in technology, particularly in Managed Networks—a field that plays a critical role in keeping businesses connected and thriving. While technology has long been a male-dominated industry, we are seeing more women stepping into the space, bringing fresh perspectives, diverse skills, and innovation. Their contributions are shaping the future of tech, and their stories inspire the next generation of women looking to pursue careers in this field. Breaking Into the Industry Women in tech come from various backgrounds, each with a unique journey that led them into the industry. For some, the passion for technology was ignited early on by family influences or personal experiences, while others discovered it unexpectedly and found themselves captivated by its fast-paced and ever-evolving nature. “I grew up around tech thanks to my dad, a tech enthusiast who believed in its future. He encouraged me and my sisters to pursue our passions, leading my younger sister to become a BT engineer and me to enter the tech industry,” shares Michelle Horan, Finance Director. “The constant innovation in tech excites me, and I love being part of an industry shaping the future. My dad would be proud.” Others, like Constance Smith, Head of Marketing, found their way into technology by chance but stayed because of the industry’s significant impact. “In all honesty, I kind of fell into a career in the technology sector, but I stayed because it’s an industry that shapes the future. It’s long-lasting, impactful, and constantly evolving. But historically, we haven’t always seen as many women represented in this space.” Advice for Women Entering Tech For women considering a career in tech, the advice from those already in the field is clear—believe in yourself, embrace challenges, and find supportive communities. “For women entering tech, I advise gaining experience in other industries to broaden your perspective,” says Michelle. “Be your biggest cheerleader, take on challenges, and surround yourself with inspiring people. Embrace your unique qualities—they are your superpower. Believe in yourself, and don’t be afraid to embrace the unknown.” Constance adds, “Technology thrives on diverse perspectives, and there’s room for everyone to contribute and make a difference. The more we show up, support each other, and share our ideas, the more inclusive and innovative the industry becomes for future generations.” The Most Rewarding Part of Working in Tech One of the most fulfilling aspects of working in the tech industry is seeing the direct impact technology has on businesses and individuals. Whether it’s providing connectivity solutions, streamlining operations, or driving innovation, the work done in Managed Networks is powerful and transformative. “The most fulfilling aspect of working in the tech industry, particularly in Managed Networks, is witnessing the tangible impact we have on businesses,” says Georgia English-Mather, Marketing Executive. “It’s incredibly rewarding to know that the connectivity infrastructure and tools we provide play a crucial role in helping companies not only operate smoothly but also thrive and grow in an increasingly digital world. What we do is incredibly powerful—we keep businesses connected, running efficiently, and ready for the future.” Beyond the technical impact, the people and culture within the industry are equally rewarding. “The most rewarding aspect of working in tech is witnessing its tangible impact on people’s lives,” shares Caroline Oxley, Head of People & Talent. “The industry is dynamic and ever-evolving, offering constant opportunities to learn and adapt to new challenges. Collaboration with diverse, talented teams is particularly enriching, especially in HR.” The Evolving Role of Women in Tech The representation of women in technology is steadily increasing, with more women stepping into leadership roles and contributing to groundbreaking advancements. While challenges such as unconscious bias and gender gaps still exist, progress is being made, and successful women in tech continue to pave the way for future generations. “The role of women in tech is evolving positively, with increasing representation and leadership roles,” says Caroline. “More women are pursuing STEM education, which is essential for future innovation. While challenges remain, progress is ongoing, and successful women in tech inspire future generations, showing young women they can excel in the industry.” Laura Drury, Service Desk Manager, adds, “It’s an incredibly exciting and fulfilling time to be working at Evolve in the tech industry, where opportunities for innovation and automation are constant. Each day brings something new, constantly challenging me to grow both personally and professionally, which I truly enjoy. The tech sector once had a significant gap in women’s representation, but this is changing rapidly. I’ve never once felt out of place as a woman in this industry, which speaks volumes about the company I work for. More and more women are stepping into leadership roles and thriving, proving that anything is possible regardless of gender. They’re not only bridging the skills gap but also driving continuous improvement. In today’s world, diversity and inclusion are more important than ever.” Looking Forward On this International Women’s Day, we celebrate the incredible women who are shaping the future of technology. Their resilience, creativity, and passion for innovation are not only driving the industry forward but also inspiring the next wave of women to step into tech with confidence. As we continue to push for greater inclusivity and diversity, one thing is clear—technology thrives when different voices come together to innovate and create. To all the women in tech, whether you’re just starting your journey or are already making an impact, your contributions matter, and your presence is shaping the future of the industry.

Person paying with their phone on a card machine

The Future of Retail Payments: How Secure Networks Enhance Customer Experience

As retail technology evolves, businesses must ensure their payment infrastructure keeps pace with consumer expectations. A seamless, secure, and high-performing network is essential for smooth transactions, data protection, and omnichannel experiences. Managed Network Solutions, such as those offered by Evolve, play a crucial role in maintaining the security, speed, and scalability of retail payment systems. The Importance of Secure Networks in Retail Payments Retailers handle vast amounts of sensitive financial data, making them prime targets for cyber threats. A secure network infrastructure protects payment information from breaches and fraud, safeguarding both businesses and customers. PCI DSS-compliant environments, encryption, and authentication measures significantly reduce security risks and enhance consumer confidence. Enhancing Payment Speed and Reliability Customers expect fast transactions, whether in-store or online. Slow or failed payments cause frustration and lost sales. A robust network, reinforced by high-performance data centres, minimises latency and ensures real-time processing. Managed network solutions optimise connectivity across locations, delivering a consistent checkout experience. Supporting Omnichannel Payment Experiences Retailers must support various payment methods, from traditional cards to digital wallets and Buy Now, Pay Later (BNPL) options. A resilient network enables seamless omnichannel payment experiences, allowing customers to transition effortlessly between online, mobile, and in-store purchases. Preventing Downtime with 24/7 Network Support Even brief payment processing outages can impact revenue and customer trust. Proactive, round-the-clock network monitoring helps retailers prevent downtime and resolve issues quickly. Evolve’s managed solutions include real-time diagnostics, automated failover, and expert support to ensure uninterrupted payment operations. Future-Proofing Payment Infrastructure As retail evolves, businesses must future-proof payment infrastructure with scalable and adaptive network solutions. AI-driven fraud detection, automated network management, and cloud-based payment platforms keep retailers ahead of consumer trends and security threats. A secure, optimised network is essential for seamless, reliable retail payment experiences. By prioritising security, speed, omnichannel support, and 24/7 reliability, retailers can enhance the customer journey. With Evolve’s expertise in Managed Network Solutions, businesses can confidently build a payment infrastructure that meets modern retail demands.

Sam Bradshaw: My Post- Apprenticeship Life

Click here to download At Evolve, we pride ourselves on cultivating a company culture where people are our greatest asset. That’s why we recently renewed our commitment to nurturing new talent by exceeding our 5% Club pledge, with 9.24% of Evolve’s employees enrolled in apprenticeship programmes in 2024. To look back at his journey and what his apprenticeship did for him, we sat down with Sam Bradshaw, IT Second Line Support Manager, to tell us about his experience with us. How I came to Evolve… Since childhood, I have been fascinated by the rapid development of computer technology and its impact on people’s lives. I have actively followed its progression and enjoyed solving technical issues for my family at home. This passion led me to pursue an A Level in IT alongside Sociology and History in high school, further deepening my understanding of technology and its broader societal effects. After following the traditional path through high school and A Levels, I realised I was ready to move beyond the classroom and apply my skills in a real-world setting. Although I received an unconditional offer for a place at the University of Nottingham, I recognised that an apprenticeship would give me the best of both worlds, combining the aspects of learning I enjoyed with the practical experience I wanted. After I finished college, I looked online and took my time to find an apprenticeship that was right for me. The apprenticeship at Evolve was a trainer-led course, which was a big draw for me. It meant that each module I would spend a week on a training course (roughly every 6-8 weeks), which involved spending 6-8 hours a day from Monday to Thursday on-site and learning the skills, and then taking an exam on the Friday. This format was the most helpful for me as a learner, and it meant that I got the most out of my apprenticeship. Apprentice life… Back when I was an apprentice, my hours were usually 8am-5pm, with an hour or so a day to do coursework, and of course the occasional week at a training course. A typical day would involve me working with more senior people to learn the technical elements of the job while also gathering information and evidence for my apprenticeship coursework to prove that I was learning all the relevant skills. I always felt that I had the time, space and support I needed at Evolve to meet the targets of my apprenticeship. In terms of what I learnt from my apprenticeship, the top thing would be the technical IT skills. The soft skills I learnt, such as effective communication and personal confidence, were invaluable – they’re not something you learn at school, and I will always be grateful that I learnt so many of these in my apprenticeship to prepare me for the workforce. I was one of the first-ever apprentices at Evolve, and we have since had numerous other apprentices coming through the business, which has been a big benefit to us all. I completed my Level 3 IT Apprenticeship within 18 months and went straight on to complete my Level 4 IT Apprenticeship within 18 months as well. This meant that in just 3 years I was completely qualified to take on a full-time role in IT, and this was a big accomplishment for me. It also led to me being offered the full-time role at Evolve, and I’m still here today! Life after apprenticeship… As an IT Second Line Support Manager, my role nowadays combines technical and team management skills – I manage six people in my team as well as respond to technical issues. IT is an accelerated industry. The way we use IT and the technologies that it uses (like AI) are changing all the time, so the way we support it as IT engineers changes all the time too. This rapid change is really exciting and keeps us on our toes, and it’s what I love most about the job I do. A highlight for me since starting my career with Evolve was when one of our largest customers came to us with a requirement for delivering over 1000 devices, including tablets, laptops and phones. This involved setting them up and then going to sites across the country so that our engineers could ensure they were delivered and installed correctly. It was a very rewarding project as we got really positive feedback from the customer that everything had been delivered extremely well without it impacting any normal service levels. In the next five years, I hope to progress in my current career route and stay in roles that involve both technical and management skills. I’m certain that my apprenticeship helped my long-term career goals in a way that I couldn’t have done at university. I have the practical, technical and communication skills that are enabling me to progress much quicker in my career, and an added bonus is not having to pay university fees!

Tyler Lowe: My Experience as an Evolve Apprentice

Click here to download At Evolve, we pride ourselves on cultivating a company culture where people are our greatest asset. That’s why we recently renewed our commitment to nurturing new talent by exceeding our 5% Club pledge, with 9.24% of Evolve’s employees enrolled in apprenticeship programmes in 2024. To shine a light on what an apprenticeship at Evolve looks like, we sat down with Tyler Lowe, Apprentice First Line Engineer, to tell us about his experience with us. How I came to Evolve… I’ve always had a logical and creative mind, and in fact, when I was younger, I wanted to get into the game industry. This led me to the University of Bradford, where I studied game design and development. After leaving university, I looked into various ways of getting into the industry and hoped to get a role as a Junior Game Developer or Junior Software Developer. Unfortunately for me, a lot of the big game companies at the time were laying off their staff and not taking on new people, so I quickly realised there was no opportunity for me to progress in that career path. At this point I took a step back and re-evaluated what my options were. I looked at what aspects of my university course I enjoyed and was best at and decided to look for an alternative career option that would enable me to use my problem-solving and technology skills while also having a clear path of progression. This led me to Baltic Apprenticeships, the largest independent training provider in England, who work with Evolve to offer a range of apprenticeships. I got in touch and told them that I was interested in a role that covered both IT support and programming elements, and they directed me to Evolve. Apprentice life… As an Apprentice First Line Engineer, my job is basically to deal with the initial IT problem presented by the customer, ask questions and decide what the best course of action is to get the problem solved as quickly as possible. A typical day for me means coming into the office, sitting with my team of engineers, and learning from them based on the work that they do. I often watch my manager deal with an incoming IT ticket and then go away to practice that type of ticket by myself to ensure I’ve learnt it properly. My apprenticeship will last for around a year in total and started with two weeks of shadowing a colleague, learning the work they do and the IT tickets they get. I asked a lot of questions and eventually moved on to individual tasks where I used my own initiative and built my confidence – with proper management oversight, of course! As the weeks went on, the scheme gradually progressed to enable me to take on more tasks as I grew in confidence and knowledge. The biggest challenge for me has been that everything in the role is new – but that also makes it fun and exciting. I’ve even had the chance to experience some really interesting projects and visit some cool places: we had a one-off project for a longterm customer that involved me going to America with the network team to stage, build and package a new network of over 300 items. This was one of the highlights of my apprenticeship so far, and I really learned in detail how the network team works and how it complements the IT team that I work in. What I’ve learned… During my first couple of weeks at Evolve, I was very nervous to answer any of the many calls we get as first line IT engineers. My team supported me to slowly take on one or two calls to learn the ropes and help build my confidence, initially passing callers on to relevant team members and eventually being able to deal with the problem on the phone myself. Not long after this, I was recognised as the person with the greatest number of calls answered at Evolve, which was huge progress for me. Overall, my apprenticeship at Evolve has helped me to develop the skills and confidence I need to set me on a positive path for the future. In a relatively short space of time, I have become one of the most knowledgeable people in my area, and people now come straight to me with questions about it. It’s a great feeling to know how far I’ve come since my first day as an apprentice. I believe that my role is so enjoyable because I talk to real people every day and help them to solve a problem – Evolve is a people business, and that really shines through. It’s been an interesting experience for me, especially being 25 and older than many of the other apprentices, but it has taught me that you can come to an apprenticeship at any point in life, and it will always be an opportunity to learn new skills and get on a new career path. What the future holds… After university, I felt like I had been dropped with no real guidance on how to progress a career and secure a good role. Since being at Evolve, I’ve become confident that I have an abundance of choice in my future and that the next five years of my career will be great. My manager is a constant support for me in this, as she is always helping me to think ahead and understand what all my options are. The whole Evolve team has reassured me that I can explore what is best for me, ensure that I am on the right path, and that I will be supported to get there. If anyone reading this is interested in doing an apprenticeship in IT, or any other apprenticeship at Evolve, I would say go for it. It’s a lot easier to get started in an apprenticeship than you may think – you don’t need to have all the answers straight away; you are being taught