New ISACA Guide Offers Tips for Secure Mobile Payments


ROLLING MEADOWS, Ill.--(BUSINESS WIRE)-- With the increased use of mobile devices to pay for goods and services, traditional wallets with cash and credit cards could one day be obsolete. A new ISACA white paper, “Mobile Payments: Risk, Security and Assurance Issues,” examines this growing trend and offers guidance on managing risk and increasing security.

A study from Juniper Research found that the value of mobile payments for digital and physical goods, money transfers and other transactions will reach almost US $630 billion by 2014. The Mobile Payments white paper, available as a free download from ISACA, a nonprofit global association of IT professionals, identifies consumer benefits, including the speed and convenience of not carrying cash and credit cards, the consolidation of many cards, and an enhanced layer of security. Enterprises benefit by reaching more consumers, reducing the amount of stored data needed to meet compliance requirements, improving transaction security and fraud detection, and engaging in location-based marketing (geo-marketing).

“Mobile payments offer many benefits, but we also need proactive planning and measures to manage risk, which can include anything from theft of identities and services; loss of revenue, brand reputation and customer information; and money laundering and terrorist funding,” said Nikolaos Zacharopoulos, CISA, CISSP, IT auditor for Geniki Bank, Greece, and chair of ISACA’s project development team for the white paper. “This guidance identifies the risk types and the countermeasures that should be in place to mitigate them.”

The Mobile Payments white paper provides practical advice for enterprises so they can:

  • Build robust controls into the planning process.
  • Ensure that transactions are carried out only by the authorized person.
  • Identify the data that are considered personal and sensitive, and ensure that the information is protected.
  • Ensure that third parties involved have robust security governance in place.
  • Pay specific attention to the originating point of a mobile transaction—the customer device and the user

“Security will be a major driver for the adoption of mobile payments, as trust plays a very important role when the customer decides to use a new payment tool,” said Zacharopoulos. “While more regulation in the mobile payment ecosystem is developing, it is important that enterprises proceed with care so they can offer consumers the conveniences of mobile payments as well as the security and privacy necessary.”

For more information, download the free ISACA white paper from Guidance on mobile device security is available at


With 95,000 constituents worldwide, ISACA provides knowledge, certifications and education on information systems assurance and security, enterprise governance and management of IT, and IT-related risk and compliance. Founded in 1969, ISACA attests IT skills and knowledge through the Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT) and Certified in Risk and Information Systems Control (CRISC) designations.

Follow ISACA on Twitter:


Kristen Kessinger, +1.847.660.5512
Joanne Duffer, +1.847.660.5564

KEYWORDS:   United States  North America  Illinois

INDUSTRY KEYWORDS:   Technology  Online Retail  Internet  Networks  Software  Telecommunications  Security  Mobile/Wireless  Professional Services  Banking  Consulting  Retail