Protegrity Shopdirect Brochure

The Value of CUSTOMER information

Shop Direct’s customers are at the heart of everything you do; each one has a monetary value to the company.

As a retailer that is now 100% committed to being digital only, you are clearly very conscious that data-fuelled customer experience and personalisation increases customer trade rates, satisfaction and loyalty.

Given the group’s strategy to deliver key strategies through data & analytics, easy customer experience and personalisation, Shop Direct will be sensitive to the part that data protection must play to support this.

When personalising the customers’ journey, increasing responsibility and regulation means the right tools are just as important as the right people when aspiring to fulfil the business’ full potential.

Data protection drives…

Data responsibilities…

• Customer acquisition and loyalty

• Payment Card Industry

• Establishment of trusted brand

• Personally Identifiable Information

• Expansion into new market sectors

• Cloud personalisation programme

• Digital innovation

• General Data Protection Regulation

• Enhanced customer experience

• Multi Channel

Protegrity: Helping Brands Protect Sensitive Assets for Over 10 Years Like Shop Direct, Protegrity has a passion for our customers, our people and the work we do, and we’re keen to share the best practices for protecting sensitive data that we’ve honed from working with over 300 global brands.

Our disruptive data protection solutions offer Shop Direct better flexibility and capability in a way that will not compromise operational excellence or digital success.

Protegrity expertise includes central control of…

Data Discovery Enterprise-wide Data Protection Cloud and Big Data Security Encryption and Pseudonymisation Audit and Compliance Reporting

Our work is driving analytical excellence through more powerful, flexible data security and compliance with key regulations as shown in the following four use cases.

Given the highly sensitive nature of the services we provide to our customers, their identities have been anonymised here to protect their security posture but further details are available upon request.

use case 01 FINANCIAL SERVICES A major commercial leasing and financial organisation servicing the healthcare, media and real estate industries and more, chose sales compensation platform Xactly to enhance employee engagement and effectiveness programmes.

Corporate security policies and international data residency requirements meant the organisation was unable to roll out their new cloud based service while privacy protection challenges remained.

According to internal mandates much of the Xactly functionality could not be utilised until personal performance and compensation related employee data within the SaaS application had been de-identified.

Custom coding a data protection solution to meet in-house standards for security was deemed too time consuming and expensive to embark on, so the organisation sought robust solutions for Xactly that would allow them to elevate the SaaS platform’s native data protection offering, without noticeable impact to the user experience.

They selected Protegrity’s data security gateway for Xactly, which enabled them to compliantly protect sensitive information in the SaaS application while transparently preserving its full functionality.

With Protegrity, the organisation can confidently carry out key analytics and reporting required for compensation management. This ensures the company remains competitive in attracting the best candidates as well as enhancing how they manage less successful employees.

IMPACT Enhanced security with little to no impact on the performance of a key HR application

DRIVER

The [Protegrity] team has been a true partner, not just another vendor…

My deepest thanks to the entire combined teams for collaborating and unlocking the capabilities we have all been waiting for.

Executive IT Leader (Risk, HR, Equity & Lending Workflow)

Transform sales compensation and employee engagement programme

CHALLENGE Enable HR users to use the powerful sales and engagement platform in a secure way outside of the corporate network and still run critical reporting and analytics

STEPS TO SUCCESS Used Xactly platform to prove security of using cloud platforms for sensitive information. The organisation will expand into other SaaS platforms as a result of the ease and success of the Xactly project

SOLUTION All user access and policies are managed centrally and the Protegrity Cloud Gateway for Xactly carries out rapid protection of sensitive data without impacting the day to day operation

BENEFITS The HR team can leverage a powerful tool securely without impacting on their tasks and all internal information security requirements have been met

use case 02 ECOMMERCE RETAILER Compliance with internal privacy requirements and industry data protection standards within a very short turnaround time made this eCommerce giant seek advice about security solutions to protect PII and PCI data within their data warehouse.

The global online retailer felt confident they had found a security solution they could trust to protect customer information without compromising performance. Within three weeks, data discovery was complete and the entire solution took fewer than six months to implement. The retailer started by providing Protegrity with a list of high priority sensitive data elements to be protected, which formed the basis of their organisation’s security policies. Protegrity’s Enterprise Security Administrator enabled the retailer to centrally control and enforce security policies throughout the data flow, and Protegrity Database Protectors ensured that sensitive information remained protected within the enterprise data warehouse.

This deployment also allowed the retailer’s security team to restrict access to sensitive data to authorised users only and automate monitoring, auditing and alerts on the entire data security system for compliance with not only internal privacy requirements but also those of the GDPR ahead of time. This global eCommerce company is now expanding the Protegrity model to bring their entire organisation into compliance with international data protection regulations.

IMPACT Negligible

DEPLOYMENT Less than 6 months

VOLUME PII protection in 500 tables

DRIVER

Protegrity came very highly recommended by data warehouse provider and they’ve more than met our expectations.

Compliance with internal requirements and industry standards for data protection

CHALLENGE A very short deadline for project completion

STEPS TO SUCCESS Working with data owners to discover sensitive data elements throughout the data flows

SOLUTION Protegrity’s Enterprise Security Administrator and Database Protectors for central control of data protection, monitoring and alerting

BENEFITS Compliant business performance continuity and an established model for GDPR success ahead of time

use case 03 TRANSPORT & TRAVEL Providing ticket transaction settlement services between airlines and travel agencies, this global organisation needed to protect the credit card and personal information of 2.2 billion passengers for regulatory compliance in a multi-tenant environment, without compromising the ability to utilise it for air travel industry insights.

The complexities of large data volumes, from multiple source systems, meant that this “data store for the airline industry” needed a consistent, centrally managed, flexible, scalable and highly performing security solution to avoid performance impact on the platform. They chose Protegrity’s Database Protector for Teradata as it uniquely met all security, performance, administration and usability requirements.

Data-centric protection, leveraging encryption and tokenisation, took Teradata Database out of scope for PCI audit, and provided increased data security, in transit, in use and at rest throughout the organisation. This helps the organisation continue to compliantly provide data as a single record of truth to their industry, without risk of data loss.

Starting with PCI data in Teradata Database as their model for success, this organisation has successfully implemented Protegrity solutions as their business needs have evolved, to also secure sensitive personally identifiable information within Oracle and SQL Server environments.

IMPACT Less than 5% on CPU

DEPLOYMENT Less than 9 months

VOLUME 17 terabytes, 50 columns

DRIVER

The results speak for themselves.

It’s been great.

We have a really great relationship with Protegrity.

Payment card data protection for PCI compliance and privacy as a corporate brand value

CHALLENGE Protecting over 60% of worldwide airline ticket transaction data from 2.2 billion passengers and multiple sources consolidated in a multitenant, distributed estate

STEPS TO SUCCESS Started by protecting PCI data itself, then expanded to PII throughout the enterprise

SOLUTION Protegrity’s Enterprise Security Administrator and Database Protectors enable this organisation to centrally control, audit and report data access by authorised users in a multitenant scenario

BENEFITS Compliance with data protection regulations in multiple data environments without compromise to analytical value or business continuity and processes

use case 04 MULTINATIONAL RETAILER Internal privacy policies dictated that this multibillion dollar retailer protect the identities of their many customers and employees, an ambitious goal for a global brand committed to analytics for “digital lift” and subject to regulations including the U.S. Food & Drug Administration (FDA) reporting requirements.

Protegrity data security solutions inimitably allowed the retailer to realise their ambitions in a complicated, heterogeneous IT landscape.

Starting with Social Security Numbers (SSN), this retailer deployed Protegrity Database Protectors to protect employee data in the integrated data warehouse from Teradata.

This became the blueprint for expanding Protegrity’s footprint to include SQL Server and big data Protectors for Pivotal HD, to protect sensitive information and business processes throughout the enterprise.

Leveraging Protegrity Vaultless Tokenisation, which replaces sensitive data with secure tokens of the same data type and length, has enabled this retail brand to democratise access to data without the need for changes to existing tables, applications and operational processes including analytics.

Using Protegrity’s Enterprise Security Administrator enables this retailer’s security team to centrally monitor and restrict access to sensitive data, define alerts for the entire data security system and automate auditing and reporting for compliance with the FDA.

IMPACT Almost no negative effect on business processes

DRIVER

Internal customers need access to data in real time. They need to be able to do experiments and to do those on entire data sets. If we can clean and tokenise data, we can allow people to access it.

Maintaining privacy as a corporate brand value while enabling analytics for “digital lift” and complying with FDA regulations

CHALLENGE Democratising data access while satisfying stringent corporate and legal requirements without compromising business processes

STEPS TO SUCCESS Focusing on one sensitive data element as a priority and using tokenisation to protect it without diminishing its value which served as a blueprint to scale and expand security to other business systems

SOLUTION Protegrity’s Enterprise Security Administrator and Database and Big Data Protectors enable this organisation to centrally control, audit and report access to sensitive information

BENEFITS Compliant data democratisation without compromise to analytical value or business continuity

Protegrity was born of the need to deliver a new kind of data security that is equipped to meet the challenges of modern enterprises: security that protects the data itself everywhere it goes while enabling businesses the freedom to transform and innovate with their data.

The right balance between sophisticated data analysis and risk management can be achieved. Neither needs to be sacrificed. Data today is more than power – it is the lifeblood of the organisation and needs to flow to the right data owners in real-time. If it can’t be mined and manipulated at or near real-time while still maintaining security and privacy, it’s not delivering maximum value.

Contact Protegrity Ian Stocks Business Development Specialist D: 0203 677 5458 M: 07757 732631 E: ian.stocks@protegrity.com Suite 2, First Floor | Braywick House West | Windsor Road | Maidenhead | Berkshire SL6 1DN www.protegrity.com

Copyright© 2017 Protegrity Corporation. All rights reserved. Protegrity® is a registered trademark of Protegrity Corporation.

All other trademarks are the property of their respective owners.

Teradata and the Teradata logo are registered trademarks of Teradata Corporation and/or its affiliates in the U.S. and worldwide.