Retail
Secure Data for Compliance and
Ensure Brand Reputation
There is a demand in retail to invest continually in technologies such as point of sale, payment card systems, mobile web applications, customer relationship management (CRM), and marketing analytics to better understand and influence customer behavior and build brand loyalty. Retail companies are adopting security strategies to protect critical applications from bad actors and to comply with regulatory regimes such as PCI.
Illumio Core™ prevents the spread of breaches with real-time application dependency mapping and security segmentation. Retail companies use Illumio to protect critical applications by disrupting the lateral movement of bad actors across any data center or cloud.
Benefits
Achieve compliance and reduce risk
Users deploy environmental segmentation to comply with regulations such as the Payment Card Industry Data Security Standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA) and global privacy regimes like the EU General Data Protection Regulation (GDPR). Illumio Core enables users to:
- Validate the scope of covered systems that map to compliance controls.
- Create rules to detect anomalous behavior and unauthorized and failed connections.
- Enable queries and reports for compliance audits and security investigations.
Improve vulnerability and patch management
Illumio Core overlays third-party vulnerability scan data with application dependency maps to identify an attacker’s potential pathways. This enables users to:
- Prioritize patching strategy.
- Use segmentation as a compensating control.
- Avoid breaking applications by applying the right level of enforcement.
Deploy Zero Trust security
Enable security segmentation to protect critical systems such as CRM, product design, Active Directory, and cardholder data environments from attacks that move laterally. Users operationalize Zero Trust security by:
- Gaining real visibility into the environment and understanding of the potential attack surface.
- Creating security segmentation policies that follow the workload.
- Continuously detecting for change, unauthorized connection attempts, and policy deviations
- Encrypting data in motion by policy.
September 10, 2019
"Their product is exceedingly powerful and easy to use. Of all the products I have implemented, very few, if any, have balanced power and simplicity so effectively."