STORES Magazine - March 2009 - (Page 50)

THINKING INSIDE THE BOX as new POS terminals are added, the system automatically incorporates them in the audit trail and addresses their security status. The university’s situation is typical of what Netcordia has found at large retail chains, says Eric Gilbreath, network analysis product manager for the Annapolis, Md.-based company. Like many retailers, the university found trying to keep track of a large number of payment-related devices was a “full-time job. They had a host of challenges with looking to authenticate the application of standards across a broad network that included multiple devices,” he says. Even retailers that believe their challenges won’t be as difficult because they do not have multiple hardware systems may find that that is not the case. “We’ve talked to some retailers that say, ‘We’re an all-Cisco environment so it should be simpler,’” Gilbreath says. “But then we find out they’re not all Cisco after all. They might have all Cisco routers, for example, but at the end point, there may be several different vendors providing wireless systems that have to be accounted for.” And there are a lot of operations “that assume that because they are not a retail store, they don’t have to comply with PCI,” he says. “But that is just not true.” Out-of-the-box program In addition to the potential for being fined for being out of compliance with PCI, businesses face other challenges if their payment networks are not fully secure, Gilbreath says. Security breaches or mishandling of payment information can result in litigation or damage to a retailer’s reputation, and there can be down time or lost revenue as the result of a need to remedy potential security problems. NetMRI is an out-of-the-box program that can be modified to fit specific applications. “Within 45 minutes of installing this system, a retailer can have it up and running smoothly and then begin to modify the application to fit its needs,” he says. The solution plugs directly into a network and operates in a non-intrusive manner. It produces browser-based reports that are automatically generated as issues arise. Among the compliance issues that NetMRI addresses are ensuring that vendor-supplied defaults are not used as system passwords or other security parameters (this involves changing vendor passwords and disabling all unnecessary protocols) and removing inactive users from the network and routinely changing user passwords. In addition to performing audits and issuing alerts, NetMRI also can remediate problems. “If this finds something that does not meet the PCI guidelines, it can fix the problem for you,” Gilbreath says. StORES Lauri Giesen is a Libertyville, Ill.-based business writer with extensive experience in covering payment and finance issues. WWW.STORES.ORG It’s a universal goal. Keep merchandise and assets in the store or building until it leaves through the front door. LEGALLY. At Bass Security we are experts and know how and where to look within an operation, be it a big-box store, specialty retailer, grocer or office building, to ruin a thief’s day. LOSS PREVENTION AND PHYSICAL SECURITY OPERATIONS Contact Bass Security to discuss your needs, whether for single or multiple locations. www.bass-security.com The Single Source for Mechanical and Electronic Security Services http://www.bass-security.com http://www.bass-security.com http://WWW.STORES.ORG

Table of Contents Feed for the Digital Edition of STORES Magazine - March 2009

STORES Magazine - March 2009 Contents Executive Editor's Page President's Page Movers and Spenders What Shoppers Think Take Your Laundry Online 10 Things You May Have Missed Numbers Worth Counting Full Price/Markdown Retail People Luxury for Less Q & A CONCEPT2WATCH Checkout Management Online Entrepreneurs Sustainability POS Online Strategy Online Scheduling SaaS Online Marketing Merchandise Security PCI Compliance LPinformation Supplier Directory Exception Reporting Industry Perspective Theft Research LOEB Retail Letter ARTS Update Point of View NRF News Retail Crossword Retail Industry Calendar End Cap

STORES Magazine - March 2009

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.