Industry Solutions: For Retail

Challenge: The security of personal credit card information

Retail organizations that process financial transactions are under increasing pressure to better protect personal consumer data.

Over the past few years several large retail organizations have been tainted by embarrassing media stories uncovering a significant breach of private data. Specific challenges faced by retail organizations include:


  • Protecting IT resources in an environment that is highly distributed across many locations (i.e. stores, ATMs, vendors, etc.)
  • Log management across all systems that store and/or manage sensitive credit card holder information
  • Protecting information from threats that are extremely complex and sinister including phishing, insider theft, and spyware
  • Difficulty delivering IT security in a market that is highly cost sensitive
  • Difficulty meeting the security management requirements of Payment Card Industry Data Card Standard (PCI-DSS)
  • Cleaning up after data breach including: notification laws, investigation, and litigation


QRadar solution for retail organizations:

QRadar delivers the ability to implement a comprehensive security management strategy that will significantly improve the protection of sensitive credit card holder information. Key benefits of QRadar for use by retail organizations include:


  • Comprehensive security management that converges log management, Security Information and Event Management (SIEM) and behavior analysis across all networked retail systems
  • Advanced monitoring, reporting, correlation, and auditing that is network, security, application and identity aware which is fundamental to any PCI driven security management program
  • Improved ability to detect and remediate threats to confidential corporate information and sensitive credit card holder information


Real world success stories include:


  • QRadar is used by a leading woman’s retailer, with over 3,000 storefront locations worldwide, to deliver security operational efficiency and to meet PCI requirements
  • QRadar provides network-wide surveillance, at over 10,000 locations, for a leading provider of on-demand internet and WIFI services, to deliver log management, minimize threats, and meet PCI requirements
  • QRadar is used by a worldwide leader in men’s and woman’s fashion, to provide enterprise-wide IT security management to meet multiple internal and external security management requirements, including SOX and PCI


Useful links...

White Paper: Establishing the Business Case for a PCI-compliant Security Management Program