Search

COMMENTARY
HR & EDUCATION | Contributed Content, Singapore
Published: 03 Dec 12
4447 views


Marc Bown

Top 5 hurdles in Singapore's hospitality industry

BY MARC BOWN

Tourism, especially the hotel industry, is an important contributor to Singapore’s economy and continues to enjoy buoyant growth in 2012, despite the slowing of the overall economy.

Total international visitor arrivals for Q1 2012 stood at close to 3.6 million, representing 15 per cent year-on-year growth. As one of the top five convention cities in the world and Asia’s top convention city for the tenth consecutive year according to the International Congress and Convention Association (ICCA), Singapore is an attractive destination for international conferences for many reasons, including the city’s overall safety and security.

However, key players in this industry know the value of being vigilant against not only crimes and terrorism, but also cybercriminals.

Trustwave’s 2012 Global Security Report shows that the food and beverage, retail, and hospitality industries accounted for more than 85 per cent of all data breach investigations.

These three industries have at least one thing in common: they process credit card payments. Approximately 90 per cent of APAC investigations resulted from credit card data compromises as organised crime groups continue to target these industries, due to their well-known payment-system vulnerabilities and poor security practices.

The biggest technology issue faced by the hospitality industry today is compliance with the Payment Card Industry Data Security Standards (PCI DSS). Based on our extensive research, hospitality businesses face five common challenges when it comes to PCI DSS compliance.

Broad Attack Surface Found in the Network Environments and Ecosystems

Hotel properties host a plethora of systems including reservations, accounting, sales, food services, etc. In addition, hotels are also an amalgamation of retail merchant operations across food and beverage, retail, and traditional hospitality services.

All these departments, with their high credit card transaction volume, present a large opportunity for hackers to enter the business environment and gain profit by stealing the credit card data.

The attack surface is further broadened when a hacker discovers targets on the network that use shared resources, exploits weak passwords and shared credentials used to access systems and applications, and leverages direct connections through insecure remote-access services, applications or ports left open by the firewall.

Lack of IT Security Support

To stay competitive, fast-growing franchised and corporate-owned hospitality business often open new locations quickly, focusing on expanding their business as soon as possible – with IT security support often becoming an afterthought. “Boots on the ground” IT security support is frequently lacking or non-existent in distributed, decentralised hospitality and retail businesses.

Lack of Information Security Awareness

Employees are often the weakest link in the data security chain. Of the hundreds of security incident investigations we performed in 2011, 87 per cent of companies that experienced a data breach did not have security policies in place and only 32 per cent of employees said they had received education on their organisation’s security policies.

This issue is even more critical in the hospitality and retail industries, where staff turnover rate is relatively high. As a result, providing a consistent education on security best practices and encouraging knowledge transfer are often difficult to achieve.

Complex IT Environments

In hotel properties, complexity occurs as the result of accommodating many disparate systems that need to co-exist and interact with each other, such as: central reservation systems; point-of-sale (POS) systems; platforms for finance, sales, guest services and catering; and physical security elements (e.g., surveillance, key cards) that tie into the data network.

This can result in tens or hundreds of devices sitting on the data network at individual properties. Even worse, each system may be in scope for PCI DSS, increasing the complexity of the compliance validation process.

No Network Segmentation

The lack of network segmentation amongst individual operators’ networks is another one of the greatest challenges. Computing and data networks are often flat between corporate and individual operations with minimal safeguards in between.

This situation enables cybercriminals to “jump” between specific locations and move around the network searching for credit card and other sensitive data to exfiltrate.

Conclusion
Businesses in the hospitality industry should assess their environment to determine how networks are configured and what system assets and data fall under the CPI risk profile. By segmenting some system assets and decommissioning old systems, PCI scope may be reduced.

Operators need to take an inventory of system assets and applications to determine risks and build security and compliance into their regular business processes.

In addition, management needs to determine who is responsible for compliance efforts, policies and procedures to bring together standardisation, consistency and day-to-day management for best-practice compliance.

The views expressed in this column are the author's own and do not necessarily reflect this publication's view, and this article is not edited by Singapore Business Review. The author was not remunerated for this article.

Marc Bown

Marc Bown

Marc is the SpiderLabs Managing Consultant for Trustwave in the Asia-Pacific region. Trustwave’s SpiderLabs team is responsible for the delivery of Penetration Testing, Application Security and Incident Response Services.

Contact Information



Sign up for our newsletter

 

Do you know more about this story? Contact us anonymously through this link.

Click here to learn about advertising, content sponsorship, events & rountables, custom media solutions, whitepaper writing, sales leads or eDM opportunities with us.

To get a media kit and information on advertising or sponsoring click here.

Tags: Marc Bown, Singapore's economy, Singapore visitor arrivals 2012, tourism in Singapore,

LATEST HR & EDUCATION JOBS »
  • No jobs posted on this category.
PRINT ISSUE »

Subscribe Now
What factors are keeping expats rooted in Singapore?

781 views

What factors are keeping expats rooted in Singapore?

527 views

Can Asian private equity outgrow the west?

208 views

MOST READ EXCLUSIVES

16 items that are a tad cheaper in Singapore than in Hong Kong

16 items that are a tad cheaper in Singapore than in Hong Kong

Coffee lovers need not go farther for a cheaper cup of cappuccino.

by KRISANA GALLEZO
20 Mar 2015 | 62738 views
 

Singapore’s first permanent lifestyle market opens in Bukit Timah

Singapore’s first permanent lifestyle market opens in Bukit Timah

Over 20 brands and labels are gathered together under one roof.

by KRISANA GALLEZO
5 Jan 2015 | 35722 views

Singapore Business Review’s 2014 Class of 40 and under

Singapore Business Review’s 2014 Class of 40 and under

Meet a summa cumlaude graduate who rises from poverty to become JP Morgan’s head of corporate finance.

by KRISANA GALLEZO
12 Jan 2015 | 33549 views
 

Chow Tai Fook opens second store in Singapore

Chow Tai Fook opens second store in Singapore

It's a 1,000-square feet new jewellery shop on Orchard Road.

by KRISANA GALLEZO
26 Feb 2015 | 11196 views

This food hub in Seah Street brings a throwback experience to dining

This food hub in Seah Street brings a throwback experience to dining

It offers an exciting lunch menu which changes every week.

by KRISANA GALLEZO
16 Jan 2015 | 7434 views
 

This is a woman’s world: CRIB launches Singapore’s first business and lifestyle incubator for women

This is a woman’s world: CRIB launches Singapore’s first business and lifestyle incubator for women

Find out what the three key platforms of CRIB are.

by KRISANA GALLEZO
10 Mar 2015 | 7397 views

The New Black hits Singapore with rarest green coffee

The New Black hits Singapore with rarest green coffee

It also boasts of its Impossible Collection curated by the ‘world’s rockstar roasters'.

by KRISANA GALLEZO
5 Mar 2015 | 4083 views
 

Check out this integrated office cum lab of Friesland Campina in Singapore

Check out this integrated office cum lab of Friesland Campina in Singapore

A curved glass wall resulted in a 90% open-plan office.

by KRISANA GALLEZO
17 Feb 2015 | 3993 views

Too many business cards? Why don’t you try Sansan’s business card management service?

Too many business cards? Why don’t you try Sansan’s business card management service?

After Singapore, this contract management company plans to expand in the APAC region.

by KRISANA GALLEZO
12 Feb 2015 | 3824 views
 

This startup created the world’s first bed sensor technology

This startup created the world’s first bed sensor technology

No more patients accidentally falling off hospital beds.

by KRISANA GALLEZO
14 Jan 2015 | 3263 views

Spencer Ogden gets funky with its newest trademark space in Singapore

Spencer Ogden gets funky with its newest trademark space in Singapore

The company invested over $1M to make this signature office possible.

by KRISANA GALLEZO
5 Feb 2015 | 3134 views
 

Meet INSEAD’s new chairman of the board

Meet INSEAD’s new chairman of the board

Find out how Andreas Jacobs plans to bring “business as a force for good”.

by KRISANA GALLEZO
14 Jan 2015 | 2492 views

What it’s like going into business with your significant other

What it’s like going into business with your significant other

A couple who founded an artisanal food outlet, P.Bistro, shares experience.

by KRISANA GALLEZO
9 Jan 2015 | 2134 views
 

LawCanvas saves the day: Easy legal documents in under a minute

LawCanvas saves the day: Easy legal documents in under a minute

The founders revolutionized the legal industry despite having different backgrounds.

by KRISANA GALLEZO
2 Mar 2015 | 1944 views

MetLife builds its first global R&D hub

MetLife builds its first global R&D hub

It bills itself as a first-of-its-kind innovation centre for the insurance industry.

by KRISANA GALLEZO
26 Jan 2015 | 1616 views
 

PocketMath makes buying mobile ad impressions easier

PocketMath makes buying mobile ad impressions easier

It integrates over 20 ad exchanges and offers over 20B impressions a day.

by KRISANA GALLEZO
9 Feb 2015 | 1596 views

Want to be hands-on with your ideal home setting?

Want to be hands-on with your ideal home setting?

Commune is opening an Experience Centre for meticulous homeowners.

by KRISANA GALLEZO
23 Mar 2015 | 1479 views
 

The heat is on: This office literally gets a bit hot for their green drive

The heat is on: This office literally gets a bit hot for their green drive

Discover how they execute their green initiatives in the office.

by KRISANA GALLEZO
22 Jan 2015 | 1474 views

FTMSGlobal Academy Singapore launches new weekend MBA

FTMSGlobal Academy Singapore launches new weekend MBA

The course fee is below $20,000.

by KRISANA GALLEZO
8 Jan 2015 | 1232 views
 

Here’s how migrants can be sure their loved ones back home paid the doctor a visit

Here’s how migrants can be sure their loved ones back home paid the doctor a visit

This NRI-focused startup also gives migrants monthly feedback from the doctor.

by KRISANA GALLEZO
7 Jan 2015 | 1225 views

What is the future of the sports business in Singapore?

What is the future of the sports business in Singapore?

Can a new billion-dollar stadium give Singapore the edge it needs to compete for world-class sporting events?

by STAFF REPORTER
20 Mar 2015 | 387 views
 
close Don't Show Again

STAY INFORMED! Get our free weekly newsletter