As well, some countries, such as Slovakia, have developed reputations for high levels of fraud, and HMV and other merchants no longer accept orders to be shipped to these places. A good security policy includes teaching IT staff what not to do if security is breached. Markham-based IBM Canada Ltd. Instead, companies should keep a record of everything that happened to allow prosecution of offenders when they are caught, he says. You need to keep the forensic evidence. That includes not immediately cleaning up Web sites that are defaced or fixing systems that are compromised.
Companies are often reluctant to press charges lest that scare other customers away.
That's what the bad guys are banking on. Ethical hacking services, which seek weak spots in e-commerce infrastructure, are useful to identify problems and presumably enable them to be fixed before a real crisis happens.