{"id":628,"date":"2016-05-30T14:10:26","date_gmt":"2016-05-30T11:10:26","guid":{"rendered":"http:\/\/www.endpointprotector.com\/blog\/?p=628"},"modified":"2022-05-11T11:21:25","modified_gmt":"2022-05-11T08:21:25","slug":"dlp-in-hospitality-a-success-story-at-the-mandarin-oriental-hotel-bangkok","status":"publish","type":"post","link":"https:\/\/www.endpointprotector.com\/blog\/dlp-in-hospitality-a-success-story-at-the-mandarin-oriental-hotel-bangkok\/","title":{"rendered":"DLP in hospitality \u2013 a success story at the Mandarin Oriental Hotel, Bangkok"},"content":{"rendered":"<p>The quality of the services and safety are extremely important in the hospitality industry. Hotels do not only have to ensure their guests feel welcomed and comfortable but also safe and safety goes further than safe deposit boxes for valuable assets or money that most hotels provide in each room. Hotels are obliged to protect their customers\u2019 data against data leakage, theft or loss and to secure it against cyber attacks. People usually are not aware of this, but hotels hold a lot of private records, like credit card numbers, e-mail addresses, company data, for business travelers, ID numbers, and other sensitive data. I was never curious how hotels protect or what they do with my personal details, but that\u2019s something that each of us should investigate. You wouldn\u2019t want your vacation to turn into a disaster because the hotel where you are staying suffered a breach and you have to block your credit card to avoid any incident or worse, your credit card was \u201ccleaned\u201d and you have to spend your vacation making phone calls to your bank.<\/p>\n<p>At a first glance, POS systems are the number one target and the primary source of data breaches. <a href=\"http:\/\/krebsonsecurity.com\/2015\/11\/hilton-acknowledges-credit-card-breach\/\" target=\"_blank\" rel=\"noopener\">Hilton<\/a>, <a href=\"http:\/\/krebsonsecurity.com\/2016\/01\/hyatt-card-breach-hit-250-hotels-in-50-nations\/\">Hyatt Hotel<\/a>, <a href=\"http:\/\/www.csoonline.com\/article\/2987652\/data-breach\/trump-hotels-collection-confirm-data-breach.html\" target=\"_blank\" rel=\"noopener\">Trump Hotel Collection<\/a> are some of the hotels that suffered a data breach through malware infection of the POS and other payment systems. Data security solutions to address external attacks are the first layer, however, like in any organization, to make sure all possible leakage points are covered, insider threats should also be considered.<\/p>\n<h2>Mandarin Oriental Hotel\u2019s high standards impose also strong data security<\/h2>\n<p>Mandarin Oriental Hotel is the award-winning owner and operator of some of the most luxurious hotels, resorts and residences located in prime destinations around the world. In Bangkok, the group has a truly remarkable five-star hotel that managed to become a top destination through contemporary, classic yet cutting-edge, unique blend of luxury and comfort. It was named \u201cBest City Hotel in Asia\u201d and one of the \u201cTop 20 Hotels Worldwide\u201d in 2009, among other distinctions.<br \/>\nTo ensure quality and professionalism prevail in all their business aspects, the IT department wanted to monitor and control employees from reception, marketing department, HR department, and others, who handle critical data and transfer it for job purposes on portable storage devices. Besides having a clear idea on what devices are being used and by whom, the IT Manager also wanted to have insights into what files are being copied and transferred to <a href=\"https:\/\/www.endpointprotector.com\/blog\/how-to-control-usbs-and-removable-devices-with-endpoint-protector\/\">removable devices<\/a>. The solution to fit their requirements was Endpoint Protector 4, with the Device Control module. File Tracing and File Shadowing, for data tracking and copies, were the preferred features because of the great details they provide.<\/p>\n<p>\u201cWe like Endpoint Protector 4 because it gives us the possibility to identify portable storage devices connected to the network and to restrict the transfer of information. Endpoint Protector offers granular control over portable media, with policies for devices, computers, users, groups and even custom classes,\u201d said the IT Manager of the Mandarin Oriental, Bangkok.<\/p>\n<p>Other important aspects that were valued and determined the IT Manager to implement Endpoint Protector 4 are:<br \/>\n\u2022 Features<br \/>\n\u2022 Granularity<br \/>\n\u2022 Ease of installation and use<br \/>\n\u2022 Support and updates<br \/>\n\u2022 Availability of staff when calling or asking for assistance<br \/>\n\u2022 Competitive pricing<\/p>\n<p>You can read the full case study on our <a href=\"http:\/\/www.endpointprotector.com\/resources\/mandarin-oriental-case-study\">website<\/a>.<\/p>\n<h2>Hospitality data security compliance, rules and regulation<\/h2>\n<p>Mandarin Oriental Hotel is clearly a great example to follow in both accommodation services and data security. When it comes to data security, there are a few compliance requirements for the hospitality industry. If you are part of this industry, below are three things to consider.<\/p>\n<p><strong>1. PCI compliance.<\/strong><br \/>\nPCI compliance for the hospitality industry is different than for other industries, if not for anything else, simply because of the sheer number of data security incidents. This could be caused by some of the myths which are popular in the industry, such as \u201cthe franchise handles compliance\u201d. The fact of the matter is that each hospitality entity must be certified independently, systems are not secured by default and masking numbers (hiding all the digits except the last four) is just a small step in being compliant.<\/p>\n<p><strong>2. Make security part of your DNA.<\/strong><br \/>\nIf you run a hotel, there may be reasons to think having a dedicated IT Admin is not someone you need on the permanent employee list. However, once compliance is met, it\u2019s a constant effort to stay compliant. Since data security is a demanding job, having an IT specialist on board is a must. This is particularly challenging as hotels from the same chain could have different websites and databases while restaurants and spas could be operating separately as well. On top of this, we\u2019re talking about multiple locations, making this even more complicated.<\/p>\n<p><strong>3. Think Security, not Compliance.<\/strong><br \/>\nFrom the point made above, when it comes to data security, a forward thinking person is a must. Compliance is one thing, but a good security policy can make sure you\u2019ll be compliant with upcoming rules and regulations, as well as adapted to changes in the technology field. Let\u2019s take the mobile devices we all have in our pockets for some years now. Correlated with technologies like beacons, they\u2019re going to be\u00a0common items in hotels. Beacons will definitely help the hospitality industry to offer better services but security needs to be considered even before compliance, rules and regulations are mandatory. If the beacons example is a bit too far from your current situation, what about laptops and computers? Are you protecting just Windows computers or also Macs? Are you taking into consideration the fast rise of Linux computers? What about employees\u2019 mobile devices? Are you also considering MDM as part of your security?<\/p>\n<p>Securing data in the hospitality industry is as tough as in other industries. The complexity of the network, with different payments systems, a great amount of collected data, many collaborators that also hold customers\u2019 sensitive data, like Booking.com or other booking websites, and many services that involve payments, like spas, restaurants, bars, etc. are all factors that drive an increased risk of data loss. Mandarin Oriental Hotel from Bangkok has taken a step forward in ramping up their data loss prevention setup and sets an example for continuous improvement and responsibility for the privacy of customer and employees\u2019 data as well as their know-how.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The quality of the services and safety are extremely important in the hospitality industry. Hotels do not only have to ensure their guests feel welcomed and comfortable but also safe and safety goes further than safe deposit boxes for valuable assets or money that most hotels provide in each room. Hotels are obliged to protect &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.endpointprotector.com\/blog\/dlp-in-hospitality-a-success-story-at-the-mandarin-oriental-hotel-bangkok\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;DLP in hospitality \u2013 a success story at the Mandarin Oriental Hotel, Bangkok&#8221;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":635,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-loss-prevention","entry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/comments?post=628"}],"version-history":[{"count":7,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/628\/revisions"}],"predecessor-version":[{"id":5730,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/628\/revisions\/5730"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media\/635"}],"wp:attachment":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media?parent=628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/categories?post=628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/tags?post=628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}