So, Where Are The Answers?
Clearly, it''s impossible, impractical, and unreasonable to require that everyone become an expert in information security. Thankfully, that''s not what''s required of you.
What is required, however, is a shift in thinking that moves you into the spectrum of information systems paranoia. With this shift you''ll spend the extra time it takes to locate someone who is truly qualified to help you implement your e-commerce site - the right way! Rather than cutting corners, merchant site operators are well advised to become far more selective in programmer and administrator choices and to use existing services to help move closer to the promises that e-commerce affords.
If you maintain deep pockets of cash, running an operation using highly-skilled personnel may be your best choice. However, if you maintain a small-catalog or work with low sales volumes, you may not be able to justify the investment required for in-house secure systems. If you''re the type of person who wants to ''test the waters first'' and wants to gain experience in on-line selling, a third party operation might be a better choice to start.
Information system technology decisions are really trade-offs. Are you willing to give up control to reduce operating costs? Can you live with 80% functionality delivered in a packaged solution or are you willing to pay 20 times the cost for a custom secure system? These questions should loom large as you work your way through any decision to sell via the Web.
In How Do I Pay Thee? - Let Me Count The Ways, you''ll find resources to help you ''do'' shopping carts and payment systems the right way.
The breed of Commerce Service Providers (CSPs) may provide the exact answers that you''re seeking. It''s difficult enough operating a business without constant computer security concerns. Leave it to the pros who you can trust to do it, and do it well.