Thousands of checkout lanes, finally visible.
Fraud monitoring across thousands of in-store payment systems, with PCI evidence produced as a by-product.
The brief
A national retail chain processed card payments through thousands of in-store systems that no one could see centrally, all of them in PCI scope.
The difficulty
Store networks are noisy, and point-of-sale systems are fragile. Monitoring had to stay light, and it could never interrupt a sale.
What we did
- Collect
From every lane
A central monitoring pipeline across the entire point-of-sale estate.
- Tune
For fraud first
Detections built around real fraud patterns, and the events assessors ask about.
- Respond
A path stores can follow
Alerts connected to a response process written for store operations, not only the security team.
The result
Fraud became visible across the estate. PCI logging evidence now comes from a system that runs every day, not one assembled for the audit.
The lesson
Monitoring built for an audit is switched off after the audit. Build it for fraud, and the evidence follows.