Is It Time to Switch to a PCI-Compliant Server for Your eCommerce Store?

Six Goals of PCI-DSS [Overview for PCI Compliant Hosting] | Liquid Web

If you intend to take payments for goods or services on your website, you’ll be required to comply with Payment Card Industry Data Security Standard (PCI DSS) regulations. These are the security standards that companies which store, process or transmit payment card data have to meet. In this post, we’ll take a closer look at what they are and explain why you need a PCI-compliant server.

What PCI-compliance entails

What is PCI DSS | Compliance Levels, Certification & Requirements | Imperva

If you want your company to accept online card payments your server environment and eCommerce application have to comply with PCI DSS. This is the case even if you use a third-party payment processor. Failure to comply can have a significant impact, including ongoing fines or in the worst-case scenario, being prohibited from taking payments and thus finding your company unable to trade.

The standards you have to meet for PCI compliance are detailed and rigorous. They require you to build and maintain a secure network, protect cardholder data, maintain a vulnerability management program, implement strong access control measures, monitor and test networks on a regular basis and maintain an information security policy.

Ensuring these standards are met requires many other operations to be put into effect, such as the installation and maintenance of an appropriately configured firewall, the use of strong (non-vendor-supplied) system passwords, the encryption of cardholder data during transit, the secure storage of cardholder data and the use of anti-virus software. In addition, you’ll need to update and patch applications, restrict both system and physical access to cardholder data and create unique IDs for individual staff so that you can track and monitor all access to network resources and cardholder data.

It is obvious from this that the PCI DSS standards are stringent and the responsibility for implementing and maintaining them, as well as evidencing compliance, falls with the eCommerce company and any third-party service providers they use.

The challenges and solutions of PCI compliance

Top 5 Challenges of PCI DSS Compliance - Cipher

eCommerce companies face two major challenges when striving to comply with PCI DSS regulations. Firstly, is the cost of building an in-house system that meets the standards and, secondly, they often lack the expertise to attain compliance. A solution that makes compliance easier and less expensive to achieve is to use the services of a PCI-compliant hosting provider that can offer both the server infrastructure and the necessary expertise.

At eukhost, for example, we are geared up to ensure our data centres, networks and operations are PCI DSS compliant. Aside from ensuring robust physical and system security of all our data centres,  all our VPS, cloud servers and dedicated servers are PCI compliant-capable. In other words, we are able to carry out all the necessary configuration changes needed to meet PCI compliance upon request.

There are different levels of PCI compliance and the solutions put in place will depend upon the level your business is obliged to achieve. Most eCommerce sites, for example, have to meet either the SAQ A or SAQ A-EP levels. These are required for companies which process payments via a third-party payment gateway, such as Stripe or PayPal. As customers are transferred to the payment gateway to carry out these kinds of transactions, no card information is stored or transmitted by our servers. As a result, your compliance burden is dramatically reduced.

Putting the compliance process into action

To determine the exact requirements of making a server PCI compliant, your hosting vendor will need to know the application you are going to use and the level of PCI compliance you are required to meet. Here at eukhost, we carry out the following as standard:

  • Ensure you have a firewall enabled and have a robust firewall policy implemented.
  • Ensure that you have an SSL certificate installed and correct cyphers are set up.
  • Ensure that encryption is enforced for all services.
  • Disable any software which is not required to provide service.
  • Enable and configure intrusion prevention.
  • Enable an application firewall
  • Enable and configure anti-virus and anti-malware services.
  • Ensure logging and log retention policies are in place.
  • Apply an access and password policy.
  • Ensure a backup policy is in place and that backups are encrypted.

Once you have these features, plus any others you require, put into place, you will then be able to arrange for a PCI compliance assessor to undertake a compliance scan.

Remember, overall responsibility lies with the company

While a PCI DSS compliant vendor can help you comply and do so more economically, the ultimate responsibility lies with the company. Standards, such as assigning unique user IDs and maintaining an information security policy, which are carried out in-house, also have to be achieved. Furthermore, companies also need to ensure that any third-party hosting services they use also comply with the regulations.

Conclusion

PCI DSS is one of the most important regulations that an eCommerce company has to comply with. Designed to protect the consumer, it has a stringent set of requirements and is rigorously policed. One of the most effective ways to help you achieve compliance is to use the services of a hosting partner that has experience and expertise in PCI compliance and can provide the compliant server environment required.

What role do voice search statistics play in your website

Voice Search Statistics and Emerging Trends | DBS Interactive

Leading SEO site, Backlinko, recently undertook a major study of over ten thousand voice search results. Its findings were not only interesting but informative, highlighting the things which websites need to do to rank highly for voice searches. When you take into consideration the growth in the number of voice searches, these actions become crucial if companies want to maintain their organic traffic levels in the future.

How voice search is increasing

The growth in voice search is powered by the wide number of devices that can now recognise speech. These include laptops, phones, watches, smart speakers and other smart devices like TVs. It is estimated that by the end of next year, half of all searches will be done by voice and a third of them on devices which have no screen.

The key user of voice technology is the younger generation. 66% of voice searchers are under 35 and these are also the demographic that owns most of the smart speakers and other devices. Important, also, is the fact that according to a 2018 Global Web Index survey, 75% of mobile voice searchers made an online purchase in the previous month – a key indication that voice search is being used for shopping.

With this growth in mind, here are eight important statistics and their implications for websites.

1. The average spoken search result is around 30 words

We Analyzed 11.8 Million Google Search Results. Here's What We Learned About SEO

This figure indicates the average number of words spoken back by a device when a voice search is given. It is the vocal equivalent of a knowledge graph or featured snippet shown on a screen. The importance here is that it underlies the need for sites to provide succinct rich snippets or answers to questions which search engines can use to give spoken answers. Those sites that do this have a better chance of being chosen.

2. 36% of voice search results are from sites which use structured data

How to Add Structured Data to Your Website

Google has been asking webmasters to use structured data to markup their websites for several years as it gives it a clearer understanding of what the site’s content is about. Many sites, however, have failed to make progress with this. The fact that over a third of voice research results come from those sites, is a clear indication that it’s helpful in getting you ranked.

3. Voice results come from sites with high domain ratings

Voice Search Optimization – The Ultimate Guide - SiteProNews

The company Ahrefs has a globally acknowledged rating system that is used to rank all websites from high (100) to low (0) based on the quality and size of their backlinks. In voice results, the average site had a rating of 77. This figure is a key element of your domain authority as it signifies how well your content is linked to by other high authority domains.

A score of 77 means a website has around 6,000 to 7,000 backlinks from other authority domains. The hint here is that creating quality content that others want to link to is a crucial long-term strategy for those who want to do well in voice results.

4. The average voice search result performs well on social media

Voice Search SEO Study: Results From 10k Voice Searches

It is not just getting backlinks that has an impact on voice search results. A page’s performance on social media has an influence too. The average result has almost 1200 shares on Facebook and over 40 Tweets. This is a key indication that search engines are taking other people’s views into consideration when they produce their results.

5. The average reading age is 14

With the average voice result having a reading age of just 14, it means making the vocabulary of your content accessible if you want to rank well in voice searches. However, that doesn’t mean dumbing down too much. A reading age of fourteen might not seem very sophisticated but the average UK reading age is said to be nine to eleven and The Sun newspaper has a reading age of around eight. Fourteen is the reading age of the Guardian which is by no means a dumbed down read. Bear this in mind when creating your content.

6. Few voice results had the exact search term in their title

Voice Search SEO Study: Results From 10k Voice Searches

This is further evidence that advances in Google’s algorithm have reduced the importance of keywords. Using RankBrain, Google can understand the whole of your page without having to focus just on the keywords in the title, meta descriptions and headings. The good news is that this allows you to concentrate on creating content for the user and not for the search engine.

7. The average page had a word count of over 2000 words

While the number of words spoken back by a device averages at around 30 words, the pages from which they come often have over 2000 words in their content. The implication here is that when voice searches are carried out on devices with screens, Google is focusing on providing detailed, long-form content.

If this includes product pages on eCommerce sites, then one can only assume that those products with lots of customer reviews perform best. Normally, very few product pages have anywhere near such detailed content.

8. 70% of results on smart speakers are from sites which use HTTPS

How to test secure (https) services from localhost | by Satish Verma | 47Billion | Medium

HTTPS is the secure form of HTTP, the protocol that controls how information is formatted and transmitted across the internet. The difference between them is that HTTPS encrypts data, making the transfer of personal information, such as banking details, secure during purchases. Those companies that use HTTPS are labelled as secure on browsers with the green padlock icon. Those using old fashioned HTTP are labelled ‘not secure’.

The 70% figure is a clear indication that search engines have a preference for HTTPS in their voice searches and that companies wishing to rank well need to adopt it. To do so is simple, all you need to do is purchase and install an SSL certificate for your site.

Conclusion

As voice search becomes more widely used, it is increasingly important that websites optimise for it. The statistics produced in this survey shows the factors that influence how a website performs in search results and hopefully, the finding shown here can help you to make your site perform better for voice searches.

error: Content is protected !!