Cyber-security and data protection are rapidly growing concerns for any business that feels unprepared to deal with the consequences of a hack. Whilst stringent measures are often put in place by companies, keeping ahead of the security game is key to staying safe. This is where two-factor authentication (2FA) comes in.
Cast your mind back to 2016, when news broke that Yahoo! had been embroiled in two separate data security breaches in 2013 and 2014. The 2013 hack still ranks as the largest data breach in history. Crucially, the internet search engine failed to disclose the security breach for two years after hackers stole over 3 billion users accounts with personal information. This did not end well for Yahoo! as they were presented with a $50 million bill for damages to victims, plus a further $35 million in lawyer expenses – a costly oversight.
Related articles to read next:
PSD2 and GDPR: Conflicting regulations?
Protecting data: Who must comply with EU GDPR?
This case perfectly demonstrates the close relationship between data protection and cyber-security. If businesses fail to adopt a robust approach in respect of cyber-security, this can significantly increase the risk of committing a serious breach of data protection law.
Since the Yahoo! media frenzy, we’ve seen the introduction of the General Data Protection Regulation (GDPR) across Europe. It’s designed to help tighten up controls on data security and modernize laws that protect the personal information of individuals.
As an extension, new requirements for authenticating online payments will be introduced across Europe on 14 September 2019 as part of the second Payment Services Directive (PSD2). Also known as Strong Customer Authentication (SCA), this new European regulatory requirement will act to reduce fraud and make online payments more secure.
Need help complying with PSD2 SCA?
Click here to find out more about how Currencycloud can help you with two-factor authentication
To authorize payments once SCA comes into effect, companies need to build additional authentication into their online checkout flow, using at least two out of the three elements:
This Two Factor Authentication (2FA) step adds an extra layer of security to existing measures, further protecting digital products and services.
Cyber and data protection are both high on the agenda at Currencycloud and taken very seriously. Given the complexity of cross-border payments and the sensitive data we hold, we are already finding ways to improve security and to mitigate the risks associated with the Yahoo! case.
Currencycloud is already preparing for the extra authentication that PSD2 requires by piloting a new 2FA process. This extra layer of security will help to protect online accounts against potential threats, offering a more secure online experience. Other industry leaders will follow suit, we’re just ahead of the pack for now.
As well as logging in to the Currencycloud Direct platform as usual with your username and password, we are now asking that you download the Authy app and verify your identity using your smartphone or tablet. But, don’t worry, this is not an extra task to factor into your busy day. First-time users simply need to authenticate themselves via the Authy app and then continue to do business as usual. We will just check it’s you every now and then, especially if you’re logging into your account from a different device.
Implementing 2FA will add to the many ways that we ensure your data and money is protected under regulatory laws, helping you to make online payments safely and securely. It will leave you to go about your daily business safe in the knowledge that we’re taking your security seriously.
Find out more about how Currencycloud can help your business.