Canadian Retailer - Store 2015 - 21

KRUH: A recent concern, or what I believe should be a concern for retailers,
is cyber security threats. There have
been numerous media reports over the
past couple of years concerning cyber
breaches that have involved some big
name retail brands. These breaches
have affected millions of individuals,
and cost companies millions, if not billions, in losses. However, the damage
caused by a breach is not just financial. Breaches can hurt a company's
reputation, taking months, even years
to recover from. How sensitive are you
and your companies to the threats of
cyber breaches? And, what are your
plans to protect your company and
your customers?
BEBIS: This is a topic that we're very
focused on as a company. The threat is
discussed at every board meeting, and
it also comes up as part of our audit
committee meetings. We try to keep
things simple, keeping the POS separSTEVEN BEBIS ON RICH CONTENT
ate from other information. We keep
We're the expert when people are thinking about adult beverages.
If they're thinking about scotch or craft beer, our website has all the
our customer information on a CRM
information they seek. If you're having lamb tonight, you go to the
system as opposed to a transaction
Wine and Beyond website and look up lamb food pairings and you'll
system, and we don't keep any credit
have your pick. We also show visitors to our website the proper ways
card data. Another precaution we take
to mix drinks. We focus not just on product, because you can find
to protect ourselves is by not allowing
that anywhere. We focus on content. That's where we're going.
any business to be done on personal
devices. We provide company authorized devices to our employees, which we can demobilize if we the appropriate amount of time educating our
have to. We also do things like virus testing. But most import- people. This requires a great deal of discipline
antly, we continually train and educate the company and em- throughout the entire company-but it's vital.
ployees about the possible threats and to be ready for them.
DINAN: We don't store any customer sensitive
PRUD'HOMME: We have a lot of different processes impledata in house, either. We also keep our sysmented to protect ourselves. We also conduct third party stress- tems separate. It's definitely something that
tests and internal audits that are focused on data breach. Our IT you have to be concerned about and remain
Security and Risk Management teams are critical to maintaining on top of. The one rule that I've learned is that
the integrity of our data and systems and work in close partner- you can never think that you're completely
ship with the business to ensure we are doing everything pos- covered. We're extremely focused on regularly
sible to make this a priority right across the organization.
stress-testing our systems. We do a lot of work
in-house, but our systems are stress-tested by
ROSEN: Security obviously comes down to an issue of trust
a third party. It's important for us to do this in
with our customers. As a result, we've spent more on security order to see where we need to strengthen our
in the last two years than we've spent on it cumulatively in our systems and where we might be vulnerable.
history. We don't store credit card information in-house, and It's a top priority for us to protect our brand,
we're fully PCI compliant. We conduct regular formal audits to our employees and our customers.
ensure that we're in compliance with all major protocols. Our
biggest necessity as a retailer today is to make sure we spend

www.retailcouncil.org/cdnretailer

STORE 2015 | CANADIAN RETAILER

| 21

http://www.retailcouncil.org/cdnretailer

Table of Contents for the Digital Edition of Canadian Retailer - Store 2015