Download PDF
BeyondTrust > Case Studies > Major Retailer Achieves Compliance With the PCI Data Security Standard
BeyondTrust Logo

Major Retailer Achieves Compliance With the PCI Data Security Standard

Technology Category
  • Application Infrastructure & Middleware - API Integration & Management
Applicable Industries
  • Retail
Applicable Functions
  • Business Operation
Services
  • System Integration
The Challenge
A leading retail clothing company was operating multiple brick-and-mortar enterprises using a complex patchwork of systems for identity management across its Unix, Linux, and Windows systems. When the company created a new division to handle consolidated online sales for all its enterprises, the complexity of their systems came to a head. The online division was having difficulty complying with the Payment Card Industry (PCI) Data Security Standard. The problem was that the organizations has too many different operating systems, domains, and directory services made it impossible to manage user ID and passwords systematically. The company also needed to address issues of inefficiency. For the end users, engineers and developers, it’s very difficult to maintain continuity for their day-to-day work with multiple account IDs and passwords across the enterprise.
About The Customer
The customer is a world-class apparel business operating multiple enterprises under multiple brands. The company operates multiple brick-and-mortar enterprises using a complex patchwork of systems for identity management across its Unix, Linux, and Windows systems. The company created a new division to handle consolidated online sales for all its enterprises. The company was having difficulty complying with the Payment Card Industry (PCI) Data Security Standard due to the complexity and non-integration of their systems. The company also needed to address issues of inefficiency due to the difficulty of maintaining continuity for their day-to-day work with multiple account IDs and passwords across the enterprise.
The Solution
The company undertook an identity management initiative with the twin goals of (1) complying with the PCI standard and (2) reducing the complexities of user administration. They began their strategic evaluation process by considering do-it-yourself solutions built around password synchronization and identity replication. However, the complexities of creating a solution from scratch were daunting, and the end result would be questionable. The company wanted to simplify, not over-engineer its directory services. So they went to the marketplace in search of solutions. After considering alternative directory services, the company chose BeyondTrust’s PowerBroker Identity Services in part because they already had experience and confidence using Active Directory. PBIS enabled the company to integrate all their different systems — from Unix data centers and proprietary applications to Windows, Linux, and Mac workstations — into a single domain with consolidated DNS and a structured AD.
Operational Impact
  • The company is now meeting all their PCI and SOX requirements for system-level access controls.
  • The company saw real improvements in security and management of their enterprises.
  • The feedback from the company's developers, engineers and business partners was extremely positive, as the single sign-on has reduced the complexity of their day-to-day work.

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.