Caribou Coffee selects software to help it track finances

FOSTER CITY, Calif. — Imperva, a data security and compliance solutions provider, announced that Caribou Coffee has deployed the SecureSphere Database Monitoring Gateway (DMG) to meet compliance requirements imposed by the Sarbanes-Oxley (Sarbox) legislation.

 

According to a news release, Caribou Coffee chose the SecureSphere DMG for its unique ability to monitor and report on actions taken by each user that accesses the company's Microsoft SQL Server database directly or via the Microsoft Dynamics (formerly Great Plains Software) financial application.

 

Caribou Coffee became a publicly traded company in Oct. 2005, and as such is required to comply with the Sarbox legislation. The company lacked the ability to track and document who was accessing the SQL Server database and what changes they were making. Since direct access to the database is not audited by the Microsoft Dynamics financial application and pooled log-in accounts prevent tracing activity to responsible users, Caribou Coffee could not document Sarbox compliance.

 

The company said it selected SecureSphere for its ability to monitor all database activity and link every transaction in the SQL Server database with the individual user who carried it out via the Microsoft Dynamics financial application.

 

"Without the ability to audit all users who access and modify our financial database, we could not prove that we were in compliance with Sarbanes-Oxley," said Scott Ficek, senior director of information systems for Caribou Coffee. "SecureSphere allows us to track all database users, including database administrators and developers, and trace their actions without impacting the performance or stability of our Microsoft SQL Server database. Even though it provides more functionality than the competing products we tested, it's easier to install and operate — we had it working before lunch."