Simplifying compliance and risk management

Compliance and Risk Management for Hospitality and Restaurants

Hospitality Regulations Supported

TruArx can help hospitality and restaurant organizations comply with close to 500 regulations and standards. Typically, the ones below are most important to our hospitality clients:

• PCI DSS
• SOX 404 (including COSO, COBIT, and 15 others)
• State Privacy / Breach Notification Laws (over 75 laws)
• International Privacy Laws (over 40 laws, including EU Data Privacy and PIPEDA)
• Direct Marketing Related Laws (US and International)

Customers Served

TruArx has the hospitality experience to understand your business and technology issues. We are proud to serve:

• 2 of the top 10 hotel groups
• 2 of the top 10 restaurant franchisees
• 1 of the top 5 restaurant franchisors
• 1,000s of restaurant and hotel locations

Relevant Services

While TruArx provides a wide range of services to clients from SaaS to consulting, the ones below are most commonly requested by our hospitality clients. Please click the service to learn more.

• TruComply
• TruPCI
• TruAware
• Managed Risk and Compliance Services
• Security Index Assessment (SIA)
• PCI DSS Assessments
• Other Consulting Services

In the not too distant past, IT compliance management was not a priority for franchisors or franchisees. Today, both confront a bewildering array of industry standards and regulation, from the Payment Card Industry Data Security Standard (PCI DSS) to state privacy and breach notification laws. Larger, publicly traded organizations also must deal with SOX compliance.

TruArx can help. TruArx offers a full range of services to help everyone from the largest global franchisor to a single location franchisee - wherever they may be on the maturity curve. For organizations which are still coming to grips with the PCI DSS, TruArx offers a comprehensive set of services, including PCI DSS assessments, ASV scanning, policy development, and the industry’s most comprehensive security training curriculum. All these services are enabled by TruPCI. TruPCI does more than help an organization complete a Self Assessment Questionnaire or Report on Compliance, it enables them to proactively manage their PCI DSS compliance year round, reducing compliance risk and protecting cardholder data.

As organizations mature, TruArx can help them address their other requirements, leveraging the investment they have made in PCI DSS compliance. Common objectives include eliminating redundancy between SOX and PCI DSS controls, identifying compliance issues with state, federal, and international privacy laws, reviewing direct marketing practices, and improving disaster recovery/business continuity planning. TruArx has helped retail clients meet these objectives by providing our IT GRC technology, TruComply, through point-in-time assessments, and through our ongoing Managed Risk and Compliance Services.