- As a CIO of a hotel, restaurant, or casino, you have to find an EMV solution for new liability rules that take effect on October 15th, 2015.
- This “liability shift” makes the non-EMV compliant party responsible for losses in the event of a compromise at the point of sale.
- As industries focus on customer service, it’s important to ensure that customers have a positive experience with payment technologies.
- Money that has been stolen from U.S. issuers, merchants, and consumers is on the rise. However, indirect costs are rising just as drastically. Moreover, reissuance costs are not factored into these statistics: the real cost of fraud may be 5 to 6 times greater.
Our Advice
Critical Insight
- EMV is not a mandate – It’s a liability shift specific to counterfeit fraud and lost/stolen cards set by the card issuers.
- EMV impacts foreign travelers from countries that have already implemented EMV. Evaluate your customer base to gauge the impact.
- EMV provides a foundation for mobile contactless payments.
- EMV does not address Card Not Present (CNP) fraud. Take additional measures during implementation to strengthen your online and over-the-phone purchasing process.
- Integrate PCI-compliant solutions, end-to-end encryption/point-to-point encryption, and tokenization for a more secure transaction.
- Check your existing contract with your card issuer: if you have a pre-existing plan, your card issuer may not legally be able to force you to change.
Impact and Result
- EMV is the first step to a multi-layered approach to protecting cardholder data upon swiping and then processing.
- Preparing for NFC payments (i.e. Apple Pay and Google Wallet) is a part of selecting your EMV solution.
- Make a solid business case for your EMV project by articulating and supporting the value it creates to the organization.
- Define the organizational context for your EMV deployment and make sure your technical requirements can satisfy your business requirements.
- Carefully plan your project prior to deployment to reduce any roadblocks and issues associated with implementation.
Workshop: Navigate the EMV Liability Shift
Workshops offer an easy way to accelerate your project. If you are unable to do the project yourself, and a Guided Implementation isn't enough, we offer low-cost delivery of our project workshops. We take you through every phase of your project and ensure that you have a roadmap in place to complete your project successfully.
Module 1: Assess the Environment and Requirements
The Purpose
- Identification of key stakeholders.
- Analysis of current state environment.
- Analysis of future state environment.
- Understanding of requirements.
Key Benefits Achieved
- Informed, engaged, and helpful stakeholders.
- Defined gaps between your current and future state.
- Documented requirements used in selecting a vendor.
Activities
Outputs
Discuss and document the current challenges, project drivers, and goals.
- Stakeholder vision
- Baseline EMV project metrics and goals
Assess the business context.
- SWOT Analysis
Determine the optimal timing for the EMV.
Evaluate and document your technical requirements.
- EMV Requirements Document
Module 2: Develop the Business Case
The Purpose
- Develop a business case.
- Assess the project financials.
Key Benefits Achieved
- Buy-in from project sponsors.
- Defined budget and project needs.
Activities
Outputs
Assess the project financials.
Develop success metrics.
Complete the business case.
- Business Case
Module 3: Select a Vendor
The Purpose
- Shortlist vendors for your solution.
- Assess vendors.
Key Benefits Achieved
- Selected vendors for your EMV solution.
- Strategic architecture needs met.
Activities
Outputs
Assess which vendors meet your needs and circumstances.
- High-level vendor shortlist
- EMV Vendor Scoring tool
Module 4: Develop the EMV Deployment Plan
The Purpose
- Create a change management plan.
- Create an implementation and testing timeline and plan.
Key Benefits Achieved
- Improved employee morale and effectiveness.
- Improved customer experience.
- Reduced implementation time.
- Reduced errors.
Activities
Outputs
Build your EMV deployment plan.
Develop an organization change management (OCM) plan.
- OCM Plan
Develop test and acceptance plans.
- Test Plan
Identify implementation/conversion risks.
- Implementation Plan
Build a timeline.