Industries Served

Solutions

Technology Spotlight

Our patented Digital Vault provides premier security.
Learn More

Retail

Protecting customer data and PCI compliance are important priorities for retailers whose rich databases are full of personal information and financial data, which make this industry particularly vulnerable to security attacks. A data leak exposing transactional data could have a lasting negative impact on customer loyalty and retention, and threaten a retailer’s brand image and consumer privacy. And with the proliferation of on-line commerce, the challenge of protecting consumers’ personal and credit card information has never been greater, or more important.

Enter the Payment Card Industry Data Security Standard (PCI DSS) which defines security measures to protect cardholder information that must be implemented by processors, merchants and service providers. Along with the common requirements for securing and managing end-user and Administrator accounts and access, within the standard are specific requirements for the removal of custom application accounts, usernames and passwords before applications become active or are released to customers (PCI 6.3.6). But an organization can’t simply eliminate hard-coded passwords at will, or the reduced security risk will come at the expense of greatly increased operational risk.

To address these concerns, retailers must use technologies that can easily, efficiently and with the least amount of business impact, ensure that the application access and authentication process to key customer data is thorough, credible and auditable without creating additional steps or risks. Let Cyber-Ark empower your retail organization to address the solvable challenge of embedded application identities and meet your PCI and SOX mandates.

Compliance drivers:

  • PCI DSS
  • PA-DSS
  • Sarbanes-Oxley

Key challenges:

Customer Snapshot:

  • Revlon
  • Regal Entertainment Group
  • Skechers
  • Pizza Hut
  • Chick-fil-A

Related media: