Search

COMMENTARY
HR & EDUCATION | Contributed Content, Singapore
Published: 03 Dec 12
3878 views


Marc Bown

Top 5 hurdles in Singapore's hospitality industry

BY MARC BOWN

Tourism, especially the hotel industry, is an important contributor to Singapore’s economy and continues to enjoy buoyant growth in 2012, despite the slowing of the overall economy.

Total international visitor arrivals for Q1 2012 stood at close to 3.6 million, representing 15 per cent year-on-year growth. As one of the top five convention cities in the world and Asia’s top convention city for the tenth consecutive year according to the International Congress and Convention Association (ICCA), Singapore is an attractive destination for international conferences for many reasons, including the city’s overall safety and security.

However, key players in this industry know the value of being vigilant against not only crimes and terrorism, but also cybercriminals.

Trustwave’s 2012 Global Security Report shows that the food and beverage, retail, and hospitality industries accounted for more than 85 per cent of all data breach investigations.

These three industries have at least one thing in common: they process credit card payments. Approximately 90 per cent of APAC investigations resulted from credit card data compromises as organised crime groups continue to target these industries, due to their well-known payment-system vulnerabilities and poor security practices.

The biggest technology issue faced by the hospitality industry today is compliance with the Payment Card Industry Data Security Standards (PCI DSS). Based on our extensive research, hospitality businesses face five common challenges when it comes to PCI DSS compliance.

Broad Attack Surface Found in the Network Environments and Ecosystems

Hotel properties host a plethora of systems including reservations, accounting, sales, food services, etc. In addition, hotels are also an amalgamation of retail merchant operations across food and beverage, retail, and traditional hospitality services.

All these departments, with their high credit card transaction volume, present a large opportunity for hackers to enter the business environment and gain profit by stealing the credit card data.

The attack surface is further broadened when a hacker discovers targets on the network that use shared resources, exploits weak passwords and shared credentials used to access systems and applications, and leverages direct connections through insecure remote-access services, applications or ports left open by the firewall.

Lack of IT Security Support

To stay competitive, fast-growing franchised and corporate-owned hospitality business often open new locations quickly, focusing on expanding their business as soon as possible – with IT security support often becoming an afterthought. “Boots on the ground” IT security support is frequently lacking or non-existent in distributed, decentralised hospitality and retail businesses.

Lack of Information Security Awareness

Employees are often the weakest link in the data security chain. Of the hundreds of security incident investigations we performed in 2011, 87 per cent of companies that experienced a data breach did not have security policies in place and only 32 per cent of employees said they had received education on their organisation’s security policies.

This issue is even more critical in the hospitality and retail industries, where staff turnover rate is relatively high. As a result, providing a consistent education on security best practices and encouraging knowledge transfer are often difficult to achieve.

Complex IT Environments

In hotel properties, complexity occurs as the result of accommodating many disparate systems that need to co-exist and interact with each other, such as: central reservation systems; point-of-sale (POS) systems; platforms for finance, sales, guest services and catering; and physical security elements (e.g., surveillance, key cards) that tie into the data network.

This can result in tens or hundreds of devices sitting on the data network at individual properties. Even worse, each system may be in scope for PCI DSS, increasing the complexity of the compliance validation process.

No Network Segmentation

The lack of network segmentation amongst individual operators’ networks is another one of the greatest challenges. Computing and data networks are often flat between corporate and individual operations with minimal safeguards in between.

This situation enables cybercriminals to “jump” between specific locations and move around the network searching for credit card and other sensitive data to exfiltrate.

Conclusion
Businesses in the hospitality industry should assess their environment to determine how networks are configured and what system assets and data fall under the CPI risk profile. By segmenting some system assets and decommissioning old systems, PCI scope may be reduced.

Operators need to take an inventory of system assets and applications to determine risks and build security and compliance into their regular business processes.

In addition, management needs to determine who is responsible for compliance efforts, policies and procedures to bring together standardisation, consistency and day-to-day management for best-practice compliance.

The views expressed in this column are the author's own and do not necessarily reflect this publication's view, and this article is not edited by Singapore Business Review. The author was not remunerated for this article.

Marc Bown

Marc Bown

Marc is the SpiderLabs Managing Consultant for Trustwave in the Asia-Pacific region. Trustwave’s SpiderLabs team is responsible for the delivery of Penetration Testing, Application Security and Incident Response Services.

Contact Information



Sign up for our newsletter

 

Do you know more about this story? Contact us anonymously through this link.

Click here to learn about advertising, content sponsorship, events & rountables, custom media solutions, whitepaper writing, sales leads or eDM opportunities with us.

To get a media kit and information on advertising or sponsoring click here.

Tags: Marc Bown, Singapore's economy, Singapore visitor arrivals 2012, tourism in Singapore,

CO-WRITTEN ARTICLES & SPONSOR CONTENT ››

Supply chain and logistics management business explained.
16 views

Global ethernet services market headed for $50 bn by 2015.
287 views

From humble beginnings to a 50,000 sqft property.
86 views

Find out why 2014 is the best time for you to enter Forex.
143 views

One-stop convention solution is here.
615 views

Its programmes ready graduates for real-world challenges.
137 views

Meet the man behind Singapore’s only automobile manufacturer.
386 views

Why is a holistic curriculum still important?
244 views

Fully furnished, hassle-free office experience.
165 views

Instead of burying their heads in books or articles on effective marketing techniques, advertising executives may want to sit back, relax and surf the web once in a while.
384 views

LATEST HR & EDUCATION JOBS »
PRINT ISSUE »

Subscribe Now
Trains, planes, automobiles and drones

132 views

As goes Hong Kong, so goes Singapore?

1106 views

Office property shows no signs of a slowdown

289 views

MOST READ EXCLUSIVES

Singapore’s 20 hotels with most expensive buffet lunches

Singapore’s 20 hotels with most expensive buffet lunches

What is for lunch?

by KRISANA GALLEZO
6 Jun 2014 | 176873 views
 

Singapore’s 20 most expensive hotel suites

Singapore’s 20 most expensive hotel suites

Guess which tops the list at S$20,000 a night.

by KRISANA GALLEZO
30 May 2014 | 148613 views

Singapore’s 18 MBA programmes under $30,000

Singapore’s 18 MBA programmes under $30,000

The cheapest is at SGD15,000.

by KRISANA GALLEZO
17 Jun 2014 | 107002 views
 

9 most expensive credit cards in Singapore

9 most expensive credit cards in Singapore

The most premium requires $150,000 annual income.

by KRISANA GALLEZO
21 Jul 2014 | 96563 views

Singapore’s 10 most expensive MBA Programmes

Singapore’s 10 most expensive MBA Programmes

The costliest is being offered at over $100,000.

by KRISANA GALLEZO
26 Jun 2014 | 80019 views
 

Singapore’s 10 hottest 40 and under restaurateurs

Singapore’s 10 hottest 40 and under restaurateurs

The list includes a restaurateur as young as 27.

by KRISANA GALLEZO
3 Jul 2014 | 38257 views

Singapore's 7 hot new restaurants in May

Singapore\'s 7 hot new restaurants in May

Have you tried them all?

by KRISANA GALLEZO
5 Jun 2014 | 22978 views
 

Singapore’s 8 hot new restaurants in June

Singapore’s 8 hot new restaurants in June

Have you dropped by to check them out?

by KRISANA GALLEZO
3 Jul 2014 | 22246 views

Korea’s Yoogane to open second outlet in Singapore

Korea’s Yoogane to open second outlet in Singapore

More outlets are soon to come.

by KRISANA GALLEZO
29 May 2014 | 16272 views
 

Pratt & Whitney Singapore office makes you feel like you’re in the outer space

Pratt & Whitney Singapore office makes you feel like you’re in the outer space

Take a sneak peek.

by KRISANA GALLEZO
25 Jun 2014 | 13341 views

Singapore's 8 hot new restaurants in July

Singapore\'s 8 hot new restaurants in July

More Singapore openings from famous restaurants in Asia.

by KRISANA GALLEZO
4 Aug 2014 | 11844 views
 

Towers Watson Singapore’s Spa Room allows staff to regenerate during lazy hours

Towers Watson Singapore’s Spa Room allows staff to regenerate during lazy hours

Also, check out awesome photos of redesigned meeting rooms and clubhouse.

by KRISANA GALLEZO
9 Jul 2014 | 10090 views

Taiwan’s Sufood hit Singapore

Taiwan’s Sufood hit Singapore

Eight more outlets coming in five years.

by KRISANA GALLEZO
12 Jun 2014 | 7294 views
 

Awesome workplace at 501: How's having a meeting while cuddling a teddy bear?

Awesome workplace at 501: How\'s having a meeting while cuddling a teddy bear?

Also check artistically designed in-house locations for video shoots.

by KRISANA GALLEZO
6 Aug 2014 | 6053 views

Check out HSBC’s high-tech flagship branch at Orchard Road

Check out HSBC’s high-tech flagship branch at Orchard Road

It’s digital hub is a star attraction.

by KRISANA GALLEZO
23 Jul 2014 | 4516 views
 

What 3 market leaders can tell you about price comparison sites in Singapore

What 3 market leaders can tell you about price comparison sites in Singapore

Financial price comparison sites face lack of consumer’s confidence.

by KRISANA GALLEZO
10 Jul 2014 | 4065 views

Find out how 3 young men at 20s founded a startup

Find out how 3 young men at 20s founded a startup

At 21, they built a job portal to help young people find their jobs.

by KRISANA GALLEZO
10 Jul 2014 | 3501 views
 

DBS added 1000 more staff in 2013

DBS added 1000 more staff in 2013

It topples UOB to become Singapore's second largest commercial bank.

by KRISANA GALLEZO
22 Jul 2014 | 1859 views

I bet you’ll cry after watching this: Singaporeans say ‘thank you’ to migrant workers

I bet you’ll cry after watching this: Singaporeans say ‘thank you’ to migrant workers

It has been viewed and shared nearly 425,000 times.

by KRISANA GALLEZO
27 Jun 2014 | 1774 views
 

Singapore startup builds world’s first crowdpricing platform

Singapore startup builds world’s first crowdpricing platform

Here’s how you could end up paying less.

by KRISANA GALLEZO
29 May 2014 | 1766 views

Haji Lane welcomes a hippy motorcycle cafe

Haji Lane welcomes a hippy motorcycle cafe

It serves all-day brunches with motorcycle merchandise up for grabs.

by KRISANA GALLEZO
28 Jul 2014 | 1759 views
 

RIP Tiger Mandala: What carrier is next to die?

RIP Tiger Mandala: What carrier is next to die?

See why Singapore based carriers are the least advantaged.

by KRISANA GALLEZO
27 Jun 2014 | 1721 views

Singpost acquires Store House in Hong Kong for $12.2m

Singpost acquires Store House in Hong Kong for $12.2m

Here's how management compares HK's self storage market with Singapore's.

by KRISANA GALLEZO
11 Jul 2014 | 1492 views
 

Might as well say, what the :pluck?

Might as well say, what the :pluck?

Ann Siang Hill and Club Street welcome a new 45-seat dining enclave.

by KRISANA GALLEZO
26 Jun 2014 | 1470 views

The Assembly Ground will choose for you the coffee that best suits you

The Assembly Ground will choose for you  the coffee that best suits you

It’s an Australian concept brought to Singapore.

by KRISANA GALLEZO
18 Jul 2014 | 1404 views
 

KepLand in the spotlight: After Equity Plaza, what's next to sell?

KepLand in the spotlight: After Equity Plaza, what\'s next to sell?

Keppel Land determined to hold its stake in MBFC Tower 3.

by KRISANA GALLEZO
26 Jun 2014 | 1290 views

Take a tour at Potato Head Folk’s whimsical dining enclave

Take a tour at Potato Head Folk’s whimsical dining enclave

Murals on the walls inspired by 1930s children’s books are fascinating.

by KRISANA GALLEZO
10 Jul 2014 | 1276 views
 

See how 99.co plans to pacify exasperated house-hunters in Singapore

See how 99.co plans to pacify exasperated house-hunters in Singapore

Tired of bogus listings?

by CARMINA JARIEL
22 May 2014 | 1259 views

Experience in 3D how your neighborhood will look like if sea levels rise

Experience in 3D how your neighborhood will look like if sea levels rise

This site is hitting almost a million unique visitors already.

by KRISANA GALLEZO
13 Jun 2014 | 1098 views
 

Check out this WhatsApp like program for online chatting

Check out this WhatsApp like program for online chatting

This startup is on its final stages of closing $500,000 fund.

by KRISANA GALLEZO
19 Jun 2014 | 1063 views
close Don't Show Again

STAY INFORMED! Get our free weekly newsletter