Written by Tim Deakin

16th May 2024

• Cyber Security

Share this article

Supporting one of the world’s favourite coffee house groups through PCI DSS certification

Caffè Nero is an independent, family run European Coffee House brand, which operates over 1,000 coffee houses in 10 countries, employing 7,000 people from 105 nationalities. It offers speciality coffee and deli quality food, all while providing a premium service experience from highly trained Baristas, who hand prepare and serve its Classico coffee. 

With so many stores around the world, the coffee house operator handles millions of transactions each year. This makes it essential for Caffè Nero to pay close attention to data protection and security surrounding the card data of its customers. 

For several years, SRM has been proud to support Caffè Nero to maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS) in the UK. In addition, we have worked with our partner network to facilitate support for Caffè Nero in the USA, where the business has expanded operations in recent years.

Commenting on the coffee house group’s working relationship with SRM, Caffè Nero Group Head of Store Systems, Mark Gurney, said,

“We have now worked with SRM on our annual PCI Audit for a number of years and they continue to impress us with their level of expertise and professionalism – from initial consultation to final implementation. They were always responsive to our questions, maintained open and transparent communication and kept us informed throughout the audit process.

“They take the time to understand our unique challenges and develop tailored solutions to address them, supporting us through a comprehensive audit of our systems and processes. SRM also introduced us to their partner consultancy in the USA, to assist us with auditing service.

“Maintaining PCI compliance ensures that our security posture is strong, helping to mitigate the potential risks associated with card transactions. With SRM’s expertise we are again assured that our PCI measures are robust. 

“I highly recommend SRM to any organisation in need of PCI advice and audit, as well as cyber security expertise and support.”

SRM Principal Consultant, Andrew Linn, said,

“It’s always a pleasure to support Caffè Nero through their PCI DSS audit. At SRM we understand how vital it is for an organisation like Caffè Nero to maintain good risk posture and take steps to demonstrate that it handles sensitive customer data safely and securely.”

Is PCI compliance important to the future security of your organisation? Get in touch.