Simplifying compliance and risk management

Compliance and Risk Management for Retailers

Retail Regulations Supported

TruArx can help retailers comply with close to 500 regulations and standards. Typically, the ones below are most important to our retail clients:

• PCI DSS
• SOX 404 (including COSO, COBIT, and 15 others)
• State Privacy / Breach Notification Laws (over 75 laws)
• International Privacy Laws (over 40 laws, including EU Data Privacy and PIPEDA)
• Direct Marketing Related Laws (US and International)

Customers Served

TruArx has the retail industry experience to understand your business and technology issues. We are proud to serve:

• Over 10,000 clients
• 2 of top 5 Food and drug stores
• 3 of the top 10 Convenience stores
• 2 of the top 5 General retailers
• 2 of the top 5 Entertainment companies
• 2 of the top 5 Movie theater chains

Relevant Services

While TruArx provides a wide range of services to clients from SaaS to consulting, the ones below are most commonly requested by our retail clients. Please click the service to learn more.

• TruComply
• TruPCI
• TruAware
• Managed Risk and Compliance Services
• Security Index Assessment (SIA)
• HIPAA and PCI DSS Assessments
• Disaster Recovery / Business Continuity Planning
• Other Consulting Services

In the not too distant past, IT compliance management was not a priority for most retail organizations. Today, retail organizations confront a bewildering array of industry standards and regulations, from the Payment Card Industry Data Security Standard (PCI DSS), to Sarbanes Oxley (SOX), to state privacy and breach notification laws. Even sophisticated organizations with mature IT governance, risk, and compliance (IT GRC) programs may struggle to identify and address all the regulatory requirements applicable to their organization.

TruArx can help. TruArx offers a full range of services to help retail organizations wherever they may be on the maturity curve. For organizations which are still coming to grips with the PCI DSS, TruArx offers a comprehensive set of services, including PCI DSS assessments, ASV scanning, policy development, and the industry’s most comprehensive training curriculum. All these services are enabled by TruPCI. TruPCI does more than help an organization complete a Self Assessment Questionnaire or Report on Compliance, it enables them to proactively manage their PCI DSS compliance year round, reducing compliance risk and protecting cardholder data.

As retail organizations mature, TruArx can help them address their other requirements, leveraging the investment they have made in PCI DSS compliance. Common objectives include eliminating redundancy between SOX and PCI DSS controls, identifying compliance issues with state, federal, and international privacy laws, reviewing direct marketing practices, and improving disaster recovery/business continuity planning. TruArx has helped retail clients meet these objectives by providing our IT GRC technology, TruComply, through point-in-time assessments, and through our ongoing Managed Risk and Compliance Services.