Case Study - Retail 

Organization:  Publicly traded on the NASDAQ.  This organization targets marketing and sales activities to Generation Y, now numbering more that 60 million individuals in the US between the ages of 10 and 24.  The organization operates a "bricks & clicks" retail model as well as operating online stores for business partners on a private label basis.

Situation:  As a company that targets the Generation Y group, their customers demand an always on web presence that's highly personalized and integrated with their online partners, enabling one-click credit card purchases and real-time inventory insight.  As a publicly traded company that privately hosts e-commerce sites for other consumer retail organizations, their shareholders and business partners demand world class security and proof of compliance.

Their data centers execute thousands of online credit card transactions everyday, and they are under intense pressure to maintain a highly secure IT environment. Due to their level of credit card transactions, they have PCI Security Audits on a regular basis.  As a result they were in need of a security and compliance solution that would allow them the flexibility to meet industry and customer driven security requirements, and allow them to demonstrate full compliance with section 404 of Sarbanes-Oxley.

Solutions Implemented: Vulnerability Management, Asset Monitoring, Remediation 

Results:  By implementing our C5 Compliance Platform this organization was able to address their need for compliance requirements and internal security needs with a single product. Their server infrastructure targeted for management was comprised of hundreds of Solaris, Linux, and Windows Servers located in two remote data centers.  They currently use these solutions to automate many functions that they previously did manually or with custom scripts, allowing them to pass their audits without adding any additional staff.

CSO Quote:  "By proactively addressing vulnerabilities, delivering automated remediations, and providing real time visibility into my compliance risks, this is an enterprise class solution that every corporation needs."