Industry Solutions: For Retail Organizations



Challenge: Ensuring that obtained credit card information is secure.


Over the past few years, the reputations of several well-known retailers have been tainted by embarrassing media stories uncovering a significant breach of their customers' private data. As a result, retail outlets that process financial transactions are now under increasing pressure to better safeguard personal consumer data.

Specific challenges faced by retail organizations include:

  • Protecting IT resources in an environment that is highly distributed across many locations (e.g., stores, ATMs, vendors, etc.)
  • Correlating log management data across all systems that store and/or manage sensitive credit card holder information
  • Protecting information from threats that are extremely complex and sinister, including phishing, insider theft, and spyware
  • Difficulty delivering IT security in a market that is highly cost sensitive
  • Difficulty meeting the security management requirements of the Payment Card Industry Data Security Standard (PCI-DSS)
  • Cleaning up after data breaches, including notification laws, investigation, and litigation


QRadar for Retail Organizations

QRadar lets retailers implement a comprehensive security management strategy that will significantly improve the protection of sensitive credit card holder information.

The key benefits of QRadar for use by retail organizations include:

  • Comprehensive security management that converges log management, Security Information and Event Management (SIEM), and behavior analysis across all networked retail systems
  • Advanced monitoring, reporting, correlation, and auditing that is network, security, application, and identity aware which is fundamental to any PCI-driven security management program
  • Improved ability to detect and remediate threats to confidential corporate information and sensitive credit card holder information


QRadar in Action: Real World Deployments

  • QRadar is used by a leading woman's retailer with more than 3,000 storefront locations worldwide to deliver security operational efficiency and to meet PCI requirements
  • QRadar provides network-wide surveillance at more than 10,000 locations for a leading provider of on-demand Internet and WIFI services to deliver log management, minimize threats, and meet PCI requirements
  • QRadar is used by a worldwide leader in men's and woman's fashion to provide enterprise-wide IT security management to meet multiple internal and external security management requirements, including SOX and PCI


Related link:

Solution Note: Establishing the Business Case for a PCI-compliant Security Management Program