STORES Magazine - February 2009 - (Page 56)

LPINFORMATION / DATA SECURITY as the framework for Security Solutions developed over the past two years, the partnership has become particularly close. Marcotte says he collaborates with his IBM consulting representative “every time I have a question. Whether I am acquiring new hardware or new software, my IBM rep lets me know what the impact will be of any sort.” Framework categories Conceived as a holistic approach to retail loss prevention, the IBM Security Solutions for Retail program is a framework of products and services divided into four categories: • Compliance Management, which includes, but is not limited to, PCI Data Security Standard compliance. • Secure Network, which focuses on bringing together IBM’s comprehensive security offerings from IBM’s Internet Security Systems (ISS), Rational and Tivoli business units to help protect databases and applications from network-based threats. • Secure Assets, which focuses on IBM’s next-generation Smart Surveillance and item-level RFID systems designed to help protect physical assets from internal and external threats. The IBM Security Solutions for Retail framework also provides solutions to help track, manage and monitor the movement of inventory and the maintenance of fixed assets. • Secure Transactions, which provides comprehensive security technologies to protect online and in-store transactions. IBM also can deliver serviceoriented architecture (SOA)-based electronic transaction solutions for the entire retail supply chain. La Senza is in the process of upgrading from Level 2 PCI compliance (fewer 56 STORES / FEBRUARY 2009 than six million transactions annually) to Level 1 compliance, and will not invest in any technology — no matter how many efficiencies it promises — if it could potentially compromise the security of its systems. There are “always a lot of people asking for technical solutions — maybe it is for stores to have access to the Internet so they can post jobs on the Internet and receive resumes directly to the store — but sometimes what they are asking for cannot, at that time, be made secure from data breaches,” Marcotte says. So in instances where “I may not see or may not be sure a potential problem exists, it is wonderful to have IBM give a second opinion.” Corporate level first In the process of becoming Level 1compliant, La Senza focused first on implementing IBM ISS, concentrating at the corporate level. It also purchased and implemented IBM’s Intrusion Prevention (IPS) and Intrusion Detection (IDS) systems. In essence, the Security Solutions framework helps retailers like La Senza “drive fraud out of the process by helping to protect the identity of transaction parties and the integrity of transactions themselves,” says Richard Orgias, security systems manager of sector solutions for IBM. La Senza uses IBM’s ISS, IDS and IPS on all of its headquarters-based IBM servers. IDS, Marcotte says, “helps ensure that internally or externally, nothing unauthorized is touching our system.” All of La Senza’s data logs, including those not generated by IBM system applications, are sent in real time to IBM’s Managed Services repository where they are monitored in real time. The bottom line, Marcotte says, is that the Security Solutions framework gives La Senza executives “peace of mind.” “There really is no return on investment working on projects like becoming PCI-compliant,” he says. “It is about eliminating the risks and a matter of knowing that our data is secure and our brands are secure and safe. That’s protection for our customers and protection for our brand. “Even if we have to pay a fine for being non-compliant, that would not be as bad as having our brand name enter the newspapers because we lost critical customer data,” he says. StORES WWW.STORES.ORG http://WWW.STORES.ORG

Table of Contents Feed for the Digital Edition of STORES Magazine - February 2009

STORES Magazine - February 2009 Contents Executive Editor's Page President's Page Are You a Pusher or a Puller? What Shoppers Think Online Retail Satisfaction 10 Things You May Have Missed Numbers Worth Counting Full Price/Markdown Retail People Cover Story - Something’s Got to Give First Look Concept2Watch Online Partners Merchandising Sustainability Inventory Systems Drug Store Systems Business Intelligence Inventory Managment Online Marketing Supply Chain - Better Data, Better Decisions Returns Management - Identifying Fraud Data Security - Securing Intimate Data Anti-Shoplifting - Mall of Shame? Risk Management - Securing Consumer Confidence Loeb Retail letter ARTS Update Point of View NRF News Retail Crossword Retail Industry Calendar End Cap

STORES Magazine - February 2009

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.