CASE STUDY

Security Solutions
Security Becomes Second Nature at Paybox Services
Complying with PCI DSS is just the start for one European payment processing service provider. French company Paybox Services is one of only a small number of European payment processing service providers offering a single platform that processes payments not just via multiple channels Internet, mail order, interactive voice servers, call centers, mobile phones, physical payment terminals, and vending machinesbut also for multiple card types such as loyalty cards, gift cards, and pre-paid cards in addition to bank cards. Being able to track and analyze all their transactions in one location greatly simplifies management and reporting for Paybox Services customers. The Paybox Services application also works on various types of payment terminals, a boon for customers whose branches or franchises use a mixture of terminal types. Paybox Services processes approximately 100 million transactions each year for around 16,000 customers in a wide variety of sectors, including car hire, ticket sales, retail, hotels, financial services, telecom, physical and digital goods, and the public sector. These organizations depend on Paybox Services for a payment processing service that is reliable, secure, and compliant with the Payment Card Industry Data Security Standard (PCI DSS).
As well as understanding our industry, the Verizon Business team has gotten to know us as a company and understands the complexity of what we do. We have absolute confidence in their expertise on all matters relating to security, risk, and compliance.
JACKY LOOS, PRESIDENT, PAYBOX SERVICES
Looking beyond PCI DSS compliance
The security of its payment processing platform has always been a top priority for Paybox Services, which gained its initial PCI DSS compliance several years ago. When the company it employed stopped offering PCI DSS assessment services shortly afterwards, Paybox Services saw it as an opportunity to find a new vendor that could offer more than just an annual PCI DSS assessment. The company wanted an information security partner that could advise it on the security and compliance implications of any developments to its processing platform. It also wanted to be confident of the security of elements of its service that werent necessarily covered by PCI DSS. Jacky Loos, President of Paybox Services, explains why the company chose Verizon Business, which is certified by the PCI Security Standards Council as a Qualified Security Assessor (QSA) company and is a market leader in PCI DSS assessments in France: Verizon had global scale, impressive security resources and a reputation as PCI DSS experts, combined with a local presence on the ground where we needed them.
Security mindset built into service development
Since Verizon Business and Paybox Services started working together, the latters PCI DSS compliance has been successfully maintained. Whenever a new version of the PCI DSS is released, Verizon Business performs a gap analysis to identify any aspects of Paybox Services processes that need to be amended to stay compliant. And, just as Mr. Loos had hoped when he selected Verizon Business, the working relationship between the two companies goes well beyond PCI DSS compliance assessments. By taking a package of consultancy services, Paybox Services can call on Verizon Business for advice whenever it feels the neednot just when its PCI DSS assessment needs to be performed. The company now has access to a whole team of security experts to answer questions and address issues relating to security. Verizon Business has helped us establish a mindset throughout the company that means we now consider the PCI-DSS relatedand broader security implicationsof any new development project before we even start work, says Marc Thomas, Technical Director at Paybox Services. In a recent example, Paybox Services wanted to give its customers the ability to store and access merchants copies of transaction slips electronically on its processing platform, making it unnecessary to print copies from payment terminals. Verizon Business experts analyzed the proposed new feature and were able to confirm to Paybox Services that they were proceeding in a way that preserved their PCI DSS compliance. By systematically anticipating the security implications of any new development and following Verizons advice, Paybox Services avoids PCI DSS or other security surprises down the line. Its platform remains aligned with compliance requirements when modifications are made.

About Verizon Business

Verizon Business, a unit of Verizon Communications (NYSE: VZ), is a global leader in communications and IT solutions. We combine professional expertise with one of the worlds most connected IP networks to deliver award-winning communications, IT, information security and network solutions. We securely connect todays extended enterprises of widespread and mobile customers, partners, suppliers and employeesenabling them to increase productivity and efficiency and help preserve the environment. Many of the worlds largest businesses and governmentsincluding 96 percent of the Fortune 1000 and thousands of government agencies and educational institutionsrely on our professional and managed services and network technologies to accelerate their business. Find out more at www.verizonbusiness.com.
About Paybox Services A long-term collaboration for security, risk, and compliance management
As well as understanding our industry, the Verizon Business team has gotten to know us as a company and understands the complexity of what we do. We have absolute confidence in their expertise on all matters relating to security, risk, and compliance, concludes Mr. Loos. Paybox Services offers a secure platform for processing electronic payments from a range of sales channels. The company constantly expands the range of cards and payment methods accepted for processing. The company is based in France, and its service is available in 40 European countries.

Learn more

For more information contact your Verizon Business account manager or visit http://www.verizonbusiness.com/Products/security/prof-svcs/pci/.

verizonbusiness.com

verizonbusiness.com/socialmedia
verizonbusiness.com/thinkforward
2011 Verizon. All Rights Reserved. CA14870 1/11 The Verizon and Verizon Business names and logos and all other names, logos, and slogans identifying Verizons products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners. 2

PRESS RELEASE, Stockholm 2011-06-01
Point acquires French company Paybox Services
- European expansion continues as Point teams up with leading e-commerce provider
Point, one of Europes largest providers of electronic payment solutions continues to grow by acquiring Paybox - one of the leading service providers of payment solutions in the e-commerce and card present sectors in France. Paybox offers payment solutions for a wide range of physical and remote access systems such as merchant websites, electronic payment terminals, call centers, automatic terminals, mobile phones or PDAs. Together, the two organisations now form the strongest provider of multi-channel payment solutions in Europe. The payment services that Paybox brings to our expanding group enable us to offer merchants a complete range of high quality services covering all their sales channels, says Johan Tjrnberg, CEO of Point. This will bring Point to the forefront of our industry as the only true multi-channel player in Europe. Point and Paybox also share two important things, Tjrnberg continues. We have the same fundamental business model. We both focus one hundred percent on the merchant and offer the advantage of working with any bank or acquirer. Paybox brings extensive e-commerce expertise that greatly benefits Point. Paybox processes approximately 10 million payment transactions per month and the majority of these e-commerce transactions come from 15,000 e-merchants linked to the company. We have been discussing the possibility of reaching out to a wider market for some time now, says Jacky Loos, President of Paybox Services. The acquisition by Point makes us a part of the market leader in electronic payment services and the fastest growing payment company in Europe. This gives us access to new markets and, at the same time, establishes us as a much bigger player in France, Loos explains. The financial strength of Point gives us opportunities to grow locally as well as internationally, which is a benefit to both existing and new customers.
For further information, please contact: Johan Tjrnberg, CEO, Point, Phone +00, E-mail: johan.tjarnberg@point.se Jacky Loos, President, Paybox Services, Phone +70 E-mail: jloos@paybox.com
About Point Point group is a leading provider of electronic payment solutions in Europe. Point group helps customers in the Nordic, Baltic, France and the UK to deliver more efficient sales of merchandise and services through the provision of innovative and secure card payment solutions. Every day, more than 10 million secure card transactions are handled through Point solutions. The group supports almost 500,000 payment devices. Customers range from large high street retail names to small independent retailers as well as e-commerce sites. Point also operates an installed base of more than 5000 ATM:s in the region. The group is present in Denmark, Estonia, Finland, France, Iceland, Latvia, Lithuania, Norway, Sweden and the UK, with almost 700 employees. For more information about Point, visit www.pointinternational.com.
About Paybox Paybox Services provides the merchants secure payment solutions in different sales channels such as online, bytelephone and in-store payments. The Paybox platform interfaces between channels and destinations such asfinancial operators, banking and business partners. The company was founded in 2000 and has since then developed a complete multi-channel offering both physical and remote. Today Paybox accepts more than 20 payment methods, among them; credit cards, private, accredited or prepaid. The company employs 53 people and provides service to more than 15,000 merchant accounts. For more information about Paybox, visit www.paybox.com