STORES Magazine - November 2008 - (Page 46)

NUTS AND BOLTS / PCI COMPLIANCE Compliance Campaign Maverik finds security benefits beyond PCI with new system BY LAURI GIESEN W hen Maverik Country Stores undertook its Payment Card Industry audit last year, it learned there was a lot more to payments security than just passing a test. Maverik failed its first PCI audit and was given three months to totally revamp the security processes related to customer payments information before being retested. A second failure could have resulting in heavy fines. During those three months Salt Lake City-based Maverik, a chain of 191 convenience stores in seven western states, installed new technology, including a central logging server powered by Post Falls, Idaho-based TriGeo Network Security. In the process, it also learned a good deal about what it takes to protect its customers. “We were shocked when we failed the first time,” says Darren Sitter, Maverik’s manager of network services. “We found we needed a lot of work.” 46 STORES / NOVEMBER 2008 Maverik had been using an internally developed, Linux-based log-in server that was found to be useless and “out of scope,” Sitter says. “We had to start from scratch and put in a whole new system within three months.” The TriGeo Security Information Manager system also provides Maverik with access to a lot more information and helps it view data security in a whole new light. “It really opened our eyes by showing us how what we had been doing was wrong and showed us how much more information can be available if you set this up right,” Sitter says. The TriGeo system provides a series of alerts and reports that allows Maverik to monitor the way its employees and outsiders are accessing and attempting to access customer payment information. Among the features are reports of failed intrusion attempts. “We didn’t have that before,” Sitter says. “If someone attempted to access information who should not have that information, they might not have gotten in, but we didn’t learn about the attempt.” The system can also take actions that are predefined by alerts established at the store level. For example, if someone WWW.STORES.ORG http://WWW.STORES.ORG

Table of Contents Feed for the Digital Edition of STORES Magazine - November 2008

STORES Magazine - November 2008 Contents Executive Editor's Page President's Page Every Cup Counts What Shoppers Think Less Park Time, More Shop Time 10 Things You May Have Missed Numbers Worth Counting Full Price/Markdown Retail People Retail Held Captive First Look Concept2Watch Marketing Technology Custom Software PCI Compliance Data Security Arts Update Newsbeat LP Issues: Q&A Cover Story Surveillance Systems Online Fraud Industry Perspective LOEB Retail Letter Point of View NRF News Retail Crossword Retail Industry Calendar Last Laugh

STORES Magazine - November 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.