The Body Shop safeguards credit card info
The global health and beauty retailer is using new log management tools to protect sensitive transactional customer data and comply with PCI standards.
![](https://cdn.mos.cms.futurecdn.net/C7gKbJJ9jGsWLckRYbBMVW-320-80.jpg)
The Body Shop has revealed it has taken on new log management and reporting software to boost its information security.
One key requirement is the Payment Card Industry Data Security Standards (PCI DSS) from VISA and MasterCard, which all large and mid-sized retailers must comply with, to ensure sensitive transactional data, such as customer credit card details, is stored and handled securely.
The health and beauty retailer will use LogLogic software to gain visibility of security events within the infrastructure environment where it handles, processes and stores credit cardholder information.
It is planning to use the PCI-specific and customisable reporting capabilities of the new software to automatically verify security processes and deliver real-time, automated alerts on log-related IT security policies and controls. The reports will also help protect the integrity of log data for auditing and possible litigation purposes.
"Meeting the PCI DSS mandate and its deadlines for compliance is very important to us as a retailer," said Jon Granville, The Body Shop's head of international e-commerce and IT. "Customer credit card information security is critical to maintaining confidence in our brand."
Granville said the decision to take on LogLogic software came after reviewing the market for both suitable and PCI compliant products.
"We then went into a detailed review process and looked at a number of factors including ease of installation and configuration, standards of reporting, scalability, usability and vendor commitment and ongoing support," he added.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
The retailer was working to very tight PCI DSS deadlines that required it to have a compliant systems in place within the Americas region by the 31 March 2008. Granville said this helped to further to differentiate the software from competitors.
"Right from outset, the vendor bought into our requirements and understood the key business drivers," he said. "It was extremely responsive to our time pressures and were, in fact, the only vendor who would give us a guarantee that they would deploy the solution into our environment by the deadline that was very important to us."
The Body Shop is now working to make its systems in the UK, Europe, Middle East and Africa (EMEA) and Asia Pacific markets PCI compliant before the 2008 deadline for these regions.
A 25-year veteran enterprise technology expert, Miya Knights applies her deep understanding of technology gained through her journalism career to both her role as a consultant and as director at Retail Technology Magazine, which she helped shape over the past 17 years. Miya was educated at Oxford University, earning a master’s degree in English.
Her role as a journalist has seen her write for many of the leading technology publishers in the UK such as ITPro, TechWeekEurope, CIO UK, Computer Weekly, and also a number of national newspapers including The Times, Independent, and Financial Times.
Resources
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.