Case Study: St John Ambulance achieves PCI DSS compliance and enhanced network visibility with LogRhythm

LogRhythm Ensures Perfect Health for PCI DSS Compliance at St John Ambulance

St John Ambulance, the UK’s leading first aid charity training over 800,000 people a year, faced a compliance and operational challenge: processing roughly 80,000 card transactions annually made them a PCI DSS level‑three merchant, requiring centralized log storage and file integrity monitoring across some 400 devices (routers, switches, firewalls). Their entirely manual log‑management process risked costly additional resources or diverting IT staff from core duties and left them exposed to audit and security gaps.

On recommendation from Softcat, St John Ambulance deployed LogRhythm (implemented by Vigil Software) to automate log collection, provide integrated File Integrity Monitoring, centralize archives and generate alerts for unusual activity. The solution delivered simplified reporting, greater network visibility and continuous alerting, achieved full PCI DSS compliance, and freed IT teams while offering a platform the charity can expand to further improve security and monitoring.

St John Ambulance

Karl Heydenrych

IT Director