Posts Tagged ‘cisco systems inc.’

Weathering the Storm

Monday, March 16th, 2009

lindsayparker

As the nation’s economy remains on shaky ground, there is no doubt in anyone’s mind that these are trying times. Everyone is being hit hard, especially retailers. With employers cutting 2.6 million jobs just last year – and two million more layoffs expected this year – employers everywhere are trying to cut costs, while improving business. Retailers across the globe are looking at how to weather the storm, and the ones who will come out on top are those who are willing to invest. Many retailers believe the obvious solution is to “hunker down” and try to ride out the economic crisis by halting all spending. However, retailers who resist this temptation and try to gain market share will have the best chance to grow customer loyalty in the long run. Once the market inevitably takes a turn for the better, they will be the winners in the retail industry.

Retailers are already looking for ways to put themselves ahead of the curve, get closer to their customers and extend brand loyalty. With fewer and fewer customers walking through the door each day, retailers are using technology as a strategic weapon to differentiate themselves and connect customers to their brands. Companies are looking beyond 2009 for ways to “do more with less” and maximize their existing technology investments to provide greater agility and flexibility. Cabela’s, a leading specialty retailer of hunting, fishing, camping and other outdoor goods, is working with Cisco and SCOPIX (a company that specializes in store operations analytics) to greatly improve the customer experience by using digital video surveillance technology to help managers monitor store traffic. SCOPIX’s web-based platform provides real-time insight into how customers are being served throughout the store and can send in-store alerts to be directly to a store managers’ mobile device so they can reallocate employees to the areas where customers are located. By being able to react promptly to issues on the store floor, Cabela’s believes they will be able to convert more sales opportunities and increase same-store sales. (more…)

PCI Standard vs. 1.2: What Do We Anticipate?

Thursday, August 14th, 2008

terriquinn.jpg The wait for the next PCI standard revision is almost over. Like so many companies, we really want a sneak peek at the newer version. And like so many companies, we’re waiting until the PCI Standard Community meeting in September to see it. Is it going to encompass major changes that are going to cause retailers to choke? I don’t think so.

The PCI Security Standards Council has been consistent with its guidance and public statement—no major overhauls to the standard, no new requirements added, but better clarification of some areas, and increased consistency with the interpretation of the requirements by QSAs. If we look at some things the council has done in 2008, they’ve already given us a few sneak peeks.

The PCI council released two information supplements in April, one on 11.3 Penetration Testing and one on 6.6 Web Application Firewall and source code review. We shouldn’t be surprised to see more details in the new standard around these areas. Both of these supplements give more clarification and guidance.

The PCI council also created special interest groups (SIG) to focus on specific areas of the standard. One of these is the wireless SIG. This is a good idea, and I hope to see advancements on the wireless side of the standard. Requiring companies to check once a quarter for wireless devices can be improved significantly. Once a quarter? That’s saying the bad guys have a chance to get caught once every 90 days. I’d like those odds improved a bit in our favor. Advice on what to do if a rogue access point is found would also help.

Overall, I will say I’m a fan of the PCI standard. If you compare it with other compliance regulations, you have to like it. The PCI standard is 17 pages long, written in English. And it gives the message clearly and concisely. It’s a good way for a company to create a security best practice foundation in their organization. An alternative is to use ISO 27001 or other frameworks and read through hundreds of pages written in legalese, and you’re still not quite sure what to do next. Give me PCI any day. It builds a good, strong foundation. Does it guarantee strong security? No, of course not. If it got that inflexible, everyone would complain that they couldn’t implement it. You can’t blame a weaker security posture on a compliance regulation. That’s like saying you blame the car when you run out of gas, obviously ridiculous.

The PCI standard is also a global standard that spans many industries beyond retail. With this, the PCI standard still hasn’t required major changes. Those are clear signs of best practice guidelines. So, the wait is almost over, and I for one am hoping it’s a bit underwhelming and not so exciting.

Terri Quinn-Andry is responsible for compliance solution development at Cisco Systems, Inc.