Somerford Associates Limited, Park House, Church Place, Swindon, UK SN1 5ED  Tel. +44 1793 698 047

www.somerfordassociates.com

Mothercare addresses PCI compliance requirements with Imprivata

LEXINGTON, MA - November 29, 2007 - Imprivata®, Inc., the authentication and access management appliance company, today announced that Mothercare, one of the UK’s leading retail chains serving the baby and children’s markets, is implementing Imprivata OneSign to support single sign-on (SSO) and strong authentication which, when rolled out, will be available to up to 750 staff. Imprivata OneSign plays a key role in helping Mothercare achieve its Payment Card Industry (PCI) compliance requirements.

As part of its overall security strategy, Mothercare has chosen Imprivata OneSign to provide strong authentication to the company’s IT network along with different authentication factors to meet staff needs. Most employees have been issued with one-time-password tokens from Secure Computing; the token is used alongside a username and password to provide network access.

For a second group of employees who work in a multi-user workstation environment, biometric fingerprint readers were chosen instead to fit with their needs. Once the user has authenticated themselves to the network, OneSign Single Sign-On automatically logs that employee into the applications that they are allowed access to.

“Security of payment data is a critical concern for the whole retail sector,” said Neil Harrington, CFO, Mothercare. “The OneSign appliance provides us with strong authentication for our employees in the manner that best suits their individual access requirements, and reporting capabilities to track and trace staff application usage as they sign into applications. With OneSign, we are able to demonstrate our compliance with relevant security regulations swiftly and efficiently.”

All organisations that handle card payments are required to meet the PCI Data Security Standard (PCI DSS), a set of security requirements based on industry best practice. “Compliance with the PCI DSS standard remains a critical issue for most retailers, as it can be difficult to prove that employees are following company guidelines and that access to sensitive data is protected. By taking an identity-centric approach to security, organisations can monitor staff activity and show that company policies are being followed,” commented Omar Hussain, CEO, Imprivata. “Imprivata OneSign provides a solution to the issue of securing access to sensitive information and applications that is easy to implement, cost effective and easy to manage, making compliance with the areas of PCI DSS concerned with data simple.“

“As Imprivata OneSign can support multiple types of strong authentication natively, designing a solution that meets the needs of different users within the organisation is far simpler,” said Andy Davies, Director, Somerford Associates, the Imprivata partner involved in the implementation. “Without OneSign, Mothercare would have required multiple systems in place that would have increased the company’s management overhead considerably.”

• Westinghouse Rail Systems Gets Employee Productivity On the Right Track With Imprivata

August 17, 2009

More

 

• Imprivata Extends Onesign’s Identity Management Capabilities with Integration with IBM Tivoli Identity Manager

January 26, 2009

More

 

• Imprivata Nominated for Three SC Magazine 2009 Awards, Recognizing Broad Capabilities Of OneSign Platform

December 15, 2008

More

 

• AppGate CEO named most valuable performer

December 9, 2008

More

 

• Access management: AppGate Network Security

December 02, 2008

More

 

• National Survey Finds Most Companies Expect to be Compliant with PCI Standards within 18 Months

October 27, 2008

More

 

• Meggitt Avionics Chooses Imprivata OneSign for Authentication & Access Management

October 2008

More

 

• Mothercare addresses PCI compliance requirements with Imprivata

November 29, 2007

More

 

• Serco Selects AppGate to Deliver Integrated IT Security and Secure Access to Council Services and IT Systems

April 26, 2006

more