Tillys
RSI Security helped us get policies and procedures ready, set us up to gather the evidence we needed, and then facilitated every step of the PCI assessment.
“RSI Security’s managed services make everything easier on our staff. We saw a huge improvement for tech staff across the board, as that part of their work is now managed throughout the course of the year instead of dumped on them all at once.”
– Guido Solares, Director of Information Security, Tillys
The Challenge
Tillys is a specialty retailer of casual apparel and accessories founded in 1982 and rooted in Irvine, California. Tillys focuses on emerging global and California-based brands targeting active and social lifestyles, and it currently operates 244 stores across 33 states.
Tillys e-commerce presence helps consumers across the country access iconic styles at affordable prices, regardless of their location. To better serve its customers across the US, Tillys set out to improve its e-commerce platform with greater security and data privacy, including seamless compliance with the Payment Card Industry (PCI) Data Security Standards (DSS).
Maintaining PCI compliance requires robust security program management, including ongoing assessment and risk management, along with document preparation and audit readiness. Tillys sought out a managed security service provider (MSSP) to optimize its cyberdefenses.
RSI Security
Security Advisory
RSI Security began Tillys advisory phase by reviewing all current security procedures and determining the scope of PCI implementation required. Some adjustments were made to Tillys security architecture to simplify control implementation and reduce overall assessment burden.
RSI Security
Compliance Assessment
RSI Security conducted the PCI assessment and prepared all necessary paperwork for Tillys to achieve compliance. This required documentation of how each requirement was being met, with diligent Self Assessment Questionnaire (SAQ) and Attestation of Compliance (AOC) reporting.
RSI Security
Managed Services
After the assessment, RSI Security continued to assist Tillys through a managed security program. RSI Security manages monthly and quarterly assessments and log reviews, leading up to quarterly consultations to make sure Tillys sustains long-term compliance and security.
Compliance That Never Goes Out of Style
With RSI Security’s help, Tillys was able to complete their PCI assessment well before the deadline, with no findings or additional adjustments needed. Tillys now sports a robust, efficient cybersecurity program that maximizes data privacy and integrity while also alleviating burdens across their technical staff. Policies and procedures are clear and easily accessible, and evidence is documented and ready to streamline all future PCI compliance assessments.
RSI Security’s managed services ensure that Tillys cybersecurity program operates efficiently with workloads spread out evenly across regular intervals. That way, audits are quicker and less expensive, and areas like training are easily replicable and scalable for ongoing cybersecurity.
THE CLIENT PERSPECTIVE
“RSI Security’s managed services provide a way to spread the workload out, making sure the actual compliance audit gets done quicker and with lower costs. They worked with us to make sure all the follow-up audits were dealt with.”
Guido SolaresDirector of Information Security, Tillys
Explore Our Case Studies
USA for IOM
Non-ProfitAccepting digital donations independently meant taking on PCI requirements without a dedicated IT team. USA for IOM turned a complex compliance challenge into a secure fundraising foundation, gaining the knowledge, policies, and processes needed to support future growth.
Epic Games
GamingManaging PCI compliance across a global gaming ecosystem required both immediate changes and a plan for what came next. Epic Games strengthened its architecture, streamlined assessments across international teams, and established a sustainable approach to maintaining PCI compliance long term.
Macomb Community College
EducationA complex higher education environment called for a more unified approach to cybersecurity. Macomb Community College built stronger governance, implemented CIS Controls, and established a roadmap its teams could sustain long term.
Turn Your Security Challenges Into Success
Every organization’s security and compliance journey looks different. RSI Security brings the expertise, guidance, and practical support needed to navigate complex requirements, reduce risk, and build a stronger security program around your organization’s goals.