Network Segmentation in Retail: A practical session on staying secure!

Over the past few months we have had a noticeable increase in requests from retailers to look at network segmentation. The question behind almost all of them is the same, “If someone gains access to the estate, how far can they travel, what damage can they do, and can the business keep trading while it is dealt with?”

Fair questions, and not simple ones to answer. Store estates grow and evolve over years, often through acquisitions. Tills, handheld devices, back office systems, customer Wi-Fi, cameras and building services frequently end up more connected to each other than anyone intended, and putting that right without interrupting trading takes some care.

We are running a short session to talk through what we are seeing and how it can be mitigated.

We will cover the threats and the weak points that come up most often in a retail estate, where legacy segmentation tends to break down in practice, and the steps that make a difference without waiting for a full network and security refresh. In our experience a phased roadmap is usually the better route than a single large programme. There is no one right answer here, so we have kept time for discussion.

If you are working through a similar requirement at the moment, or expect to be soon, you are welcome to join.

What we will cover:

• The areas of a retail estate we find most exposed: store devices, colleague and privileged accounts, third-party connections, cloud and datacentre environments, and legacy security controls that are still in place but no longer fit for purpose.
• Identifying the applications you need in order to keep trading, along with where they sit on the network and what they depend on. Rarely as simple as it first appears.
• Where segmentation looks complete on a diagram but does not hold in practice.
• Steps that improve your posture now, without a full refresh.
• How to confirm it protects you, rather than assume it does.
• Sequencing this around peak trading, when the window for change is much shorter than the year suggests.

Who it this for:

• Chief Information Security Officers
• Chief Information Officers and IT Directors
• Heads of IT and Heads of Infrastructure
• Network and security architects
• Heads of Risk and Resilience
• Store systems and retail operations technology leads

If you have any budding question, feel free to share in advance or ask anonymously on the webinar!