下载PDF
BeyondTrust > 实例探究 > Major Retailer Achieves Compliance With the PCI Data Security Standard
BeyondTrust Logo

Major Retailer Achieves Compliance With the PCI Data Security Standard

技术
  • 应用基础设施与中间件 - API 集成与管理
适用行业
  • 零售
适用功能
  • 商业运营
服务
  • 系统集成
挑战
A leading retail clothing company was operating multiple brick-and-mortar enterprises using a complex patchwork of systems for identity management across its Unix, Linux, and Windows systems. When the company created a new division to handle consolidated online sales for all its enterprises, the complexity of their systems came to a head. The online division was having difficulty complying with the Payment Card Industry (PCI) Data Security Standard. The problem was that the organizations has too many different operating systems, domains, and directory services made it impossible to manage user ID and passwords systematically. The company also needed to address issues of inefficiency. For the end users, engineers and developers, it’s very difficult to maintain continuity for their day-to-day work with multiple account IDs and passwords across the enterprise.
关于客户
The customer is a world-class apparel business operating multiple enterprises under multiple brands. The company operates multiple brick-and-mortar enterprises using a complex patchwork of systems for identity management across its Unix, Linux, and Windows systems. The company created a new division to handle consolidated online sales for all its enterprises. The company was having difficulty complying with the Payment Card Industry (PCI) Data Security Standard due to the complexity and non-integration of their systems. The company also needed to address issues of inefficiency due to the difficulty of maintaining continuity for their day-to-day work with multiple account IDs and passwords across the enterprise.
解决方案
The company undertook an identity management initiative with the twin goals of (1) complying with the PCI standard and (2) reducing the complexities of user administration. They began their strategic evaluation process by considering do-it-yourself solutions built around password synchronization and identity replication. However, the complexities of creating a solution from scratch were daunting, and the end result would be questionable. The company wanted to simplify, not over-engineer its directory services. So they went to the marketplace in search of solutions. After considering alternative directory services, the company chose BeyondTrust’s PowerBroker Identity Services in part because they already had experience and confidence using Active Directory. PBIS enabled the company to integrate all their different systems — from Unix data centers and proprietary applications to Windows, Linux, and Mac workstations — into a single domain with consolidated DNS and a structured AD.
运营影响
  • The company is now meeting all their PCI and SOX requirements for system-level access controls.
  • The company saw real improvements in security and management of their enterprises.
  • The feedback from the company's developers, engineers and business partners was extremely positive, as the single sign-on has reduced the complexity of their day-to-day work.

相关案例.

联系我们

欢迎与我们交流!

* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

Thank you for your message!
We will contact you soon.