The Body Shop has revealed it has taken on new log management and reporting software to boost its information security.
One key requirement is the Payment Card Industry Data Security Standards (PCI DSS) from VISA and MasterCard, which all large and mid-sized retailers must comply with, to ensure sensitive transactional data, such as customer credit card details, is stored and handled securely.
The health and beauty retailer will use LogLogic software to gain visibility of security events within the infrastructure environment where it handles, processes and stores credit cardholder information.
It is planning to use the PCI-specific and customisable reporting capabilities of the new software to automatically verify security processes and deliver real-time, automated alerts on log-related IT security policies and controls. The reports will also help protect the integrity of log data for auditing and possible litigation purposes.
"Meeting the PCI DSS mandate and its deadlines for compliance is very important to us as a retailer," said Jon Granville, The Body Shop's head of international e-commerce and IT. "Customer credit card information security is critical to maintaining confidence in our brand."
Granville said the decision to take on LogLogic software came after reviewing the market for both suitable and PCI compliant products.
"We then went into a detailed review process and looked at a number of factors including ease of installation and configuration, standards of reporting, scalability, usability and vendor commitment and ongoing support," he added.
The retailer was working to very tight PCI DSS deadlines that required it to have a compliant systems in place within the Americas region by the 31 March 2008. Granville said this helped to further to differentiate the software from competitors.
"Right from outset, the vendor bought into our requirements and understood the key business drivers," he said. "It was extremely responsive to our time pressures and were, in fact, the only vendor who would give us a guarantee that they would deploy the solution into our environment by the deadline that was very important to us."
The Body Shop is now working to make its systems in the UK, Europe, Middle East and Africa (EMEA) and Asia Pacific markets PCI compliant before the 2008 deadline for these regions.
-
Data center water consumption is out of control, but cloud providers want EU lawmakers to go easy on themNews The European Commission says water shortages are being exacerbated by leaks and pollution, but also points to high usage from data center operators.
-
British IT worker jailed for revenge attack on employer that caused a “ripple effect of disruption” for colleagues and customersNews West Yorkshire man Mohammed Umar Taj was suspended from his job in Huddersfield in July 2022, and began taking revenge within hours.
-
Data sovereignty a growing priority for UK enterprisesNews Many firms view data sovereignty as simply a compliance issue
-
Elevating compliance standards for MSPs in 2025Industry Insights The security landscape is set to change significantly in the years to come with new regulations coming into effect next year, here's how the channel needs to adapt
-
How ready is your company for NIS2?Supported Content The EU’s latest cybersecurity legislation raises the stakes for enterprises and IT leaders - and ensuring compliance can be a daunting task
-
Top data security trendsWhitepaper Must-have tools for your data security toolkit
-
Conquering technology risk in bankingWhitepaper Five ways leaders can transform technology risk into advantage
-
Advancing your risk management maturityWhitepaper A roadmap to effective governance and increase resilience
-
When banking works, the world worksWhitepaper Five ways automated processes can drive revenue and growth across your bank
-
Automating digital resiliency in bankingWhitepaper Prioritize investment in solutions that mitigate a lack of digital resiliency when disruptions strike
