Simplifying compliance and risk management

With more than 750 stores in 22 states, Discount Tire Company has grown to become the world's largest independent tire and wheel retailer today.  In 2007, Discount Tire's IT compliance and risk management objective was to achieve and, more importantly, sustain PCI DSS compliance.  Colleen Scott, Vice President of Information Security, knew she needed more than just  an assessment.  She needed to build a solid foundation of knowledge within the IT function and a program that would ensure compliance was an operational part of the business, not an annual event.

After evaluating multiple solutions, Discount Tire selected ANX and TruPCI. “We selected access to ANX professionals for real world advice and TruPCI because it had a feature we felt vital to our program: a task management system which would give us day-to-day insight into whether we were maintaining compliance,” said Colleen Scott.  “We have been happy with our choice and believe it is a key contributor to the progress we have made.”

Recently, Discount Tire’s focus has shifted.  “Whereas PCI compliance was the top compliance priority historically, we are now in a position to assess organizational risks and manage against other legal, regulatory and privacy requirements.”   To provide an initial baseline, Discount Tire engaged ANX to perform a Security Index Assessment (SIA).  The SIA measured Discount Tire’s security and compliance against 56 regulatory standards mutually selected by ANX and Discount Tire.

As before, Discount Tire knew it needed more than a one-time assessment, it needed a tool to cost-effectively sustain the newly enlarged scope of its risk and compliance management efforts. TruComply, ANX’s GRC application, was a natural fit. “We liked the fact that ANX could not only perform an assessment and help us assess organizational risk, they had a technology which would help us sustain our program,” said Dean Altman, Senior Security Analyst.  Colleen Scott concluded “We appreciate the fact that ANX has a scalable approach to compliance.”