PSCU offers its credit union members a self-service environment to access pre-authored reports as well as provide members with the ability to analyze data through ad-hoc report creation. In this presentation, presenters will discuss how they used SAP BusinessObjects Information Design Tool and the BI Platform 4.1 CMC to implement a security model that met PCI compliance guidelines. Techniques included custom user groups and custom variables for row level data restrictions as well as specific data masking based on the user's login information. This solution gives PSCU members a secure and flexible way to gain insights into their business.

1. Doug Perusse & Kristen St. Jean
PSCU Follows PCI Compliance Guidelines for
Self-Service BI through WebI
Session #2869

2. An award-winning consulting firm specializing in helping
customers to increase businesses performance through the
transformation of data into actionable analytic solutions.
BUSINESS INTELLIGENCE: It’s Who We Are and What We Do.
Business Value – Improve business processes via analytic solutions
Specialized Expertise – Data & Analytics: From initiative to adoption
Partner Approach – Trusted advisor and evangelist, change cultures
Our People are the Best – Experienced, passionate, professionals

3.  PSCU is the leading Credit Union Services Organization
representing over 800 credit unions
 Provide traditional and online financial services to credit
unions including credit, debit & prepaid card servicing
along with innovative bill payment solutions
 Provide a 24/7/365 contact center to support these
services
 As a cooperative, our Member-Owner credit union obtain
enormous bargaining power to negotiate rates &
agreements with suppliers & industry groups

4.  Wanted to provide a way for Member-Owners to make
better decisions more efficiently
 How do we maintain our data in order to be PCI
compliant?
 How do we display the correct data to the correct Credit
Unions?
 How do we restrict access levels?
 Partnered with CCG for the solutions

5.  Windows AD
 Syncs with BusinessObjects CMC
 Database
 Masked data for PCI compliance
 Different database users for data visibility
 Information Design Tool
 Data Security Profile connections for internal and external users
 Business Security Profile for hiding folders to external users
 Universe filter to secure data access
 Central Management Console
 User groups for each credit union and PSCU employees
Learning Points

6.  User Attribute Management to create SI_CUIID
Central Management Console

7.  User Attribute Management to create SI_CUIID
Central Management Console

8.  User Groups and Hierarchies
 Folder and Universe restrictions
Central Management Console

9.  Restrict data with database
connection
 Limit time execution
Data Security Profile

10.  Restrict certain folders in each universe
Business Security Profile

11.  Enable each Credit Union to see their own data from Filter applied to
Universe
Data Access

12. Solution

13. Solution

14. Solution

15.  Utilize User Attribute Management
 Data & Business Security Profiles required when
managing multiple groups and security settings
 Central Management Console for groups,
hierarchies, and folder restrictions
Key Learnings

16. STAY INFORMED
Follow the team:
PSCU: @PSCUForward
CCG: @ccgbi

17. SESSION CODE
#2869