Industries
Retail
In retail the register is the business. Everything else can wait; that cannot.
What makes this different
The problems specific to your sector
Not a generic list. These are the things that come up repeatedly in this kind of business.
A queue forms immediately
Point-of-sale downtime is visible to customers within a minute and costs sales that do not come back.
Card data drags everything into scope
A flat network puts every device in PCI scope. Segmentation is the difference between a short annual questionnaire and a long one.
Guest WiFi on the business network
Customers expect WiFi. Sharing it with the registers is the most common serious mistake in small retail.
Cameras installed by whoever was cheapest
Recorders with default passwords and a port opened through the firewall are common, and they are a direct route in.
Compliance
What you are actually required to do
Named obligations rather than the word 'compliance'. If one of these does not apply to you, we will say so.
PCI DSS
Applies to any business accepting cards. Segmentation materially reduces what is in scope.
Card brand requirements
Your processor sets the self-assessment questionnaire level based on how you accept payments.
Your software
We expect to find these
We work around your line-of-business software rather than asking you to change it, and we deal with the vendor when needed.
- Point of sale systems
- Payment terminals
- Inventory management
- E-commerce integrations
Recommended
Where we would start
Network Design & Firewall Management
Segmented networks and managed firewalls, so one compromised laptop cannot reach your servers or your card data.
Business WiFi
Surveyed, not guessed. Coverage designed for the building you have, with guest traffic kept off the business network.
Security Cameras & Access Control
Commercial camera systems and door access, installed on a network that is designed to keep them isolated.
Managed IT Services
Proactive monitoring, patching and unlimited help desk for a flat monthly fee — so problems are fixed before they reach your staff.
Questions
Common questions
Does segmentation reduce our PCI burden?
Yes, materially. Isolating payment systems keeps the rest of the network out of scope, which shortens the questionnaire and reduces what you must maintain evidence for.
Can customers use our WiFi safely?
Yes, on a separate network that cannot reach the registers, with sensible filtering and bandwidth limits.
Our card terminal keeps dropping.
Usually the network rather than the terminal. Payment traffic should be on its own segment with priority, not competing with customer video streaming.
Ready to secure your business?
A free assessment: we review your network, backups, Microsoft 365 settings and exposure, then hand you the findings in writing — whether or not you hire us.