Retailers face escalating cyber security challenges during peak events such as Cyber Monday. Will O’Brien outlines four steps to protect customer data this holiday season In the retail sector, cyber security often lags behind other sectors regardless of the retailer’s size or value. In the short-term, this can lead to some initial minor inconveniences, but if left unattended, it can manifest into serious issues that impact the organisation’s brand, reputation and customer loyalty. The security challenge During the peak Christmas consumer events of Black Friday and Cyber Monday, the retail sector sees a sharp uptake in business. As a result, its value to malicious actors also increases. To leverage this busy period, cybercriminals use unsophisticated phishing campaigns to gain access and steal data. when a retailer’s ‘accounts and billing’ function is in full swing during the holiday season, for example, they are more likely to fall victim to a phishing attack. While some retailers have reasonable controls in place to protect against these attacks, many rely heavily on insecure third parties to fulfil critical business functions. According to PwC’s 2023 Digital Trust Insights Survey, supply chain risks have become a big focus for regulators and organisations, with senior executives in Ireland identifying increased regulatory scrutiny as one of the top five impacts on their business since 2022. Without conducting the correct level of cybersecurity due diligence on third parties, retailers can open themselves up to cyber-attacks by providing third parties with access to their data. If these third parties fall victim to cyber-attacks, the organisation’s data – through payroll, accounts and shipping, for example – may be at risk. Despite the third party being at fault, the data controller (the organisation) is subject to fines and reputational impact. Defending consumer data Organisations can protect their digital assets by understanding the retail-specific cyber threats and associated remediation activities. 1. Education and awareness  Your people are your first line of defence against phishing campaigns. All staff should be educated on security procedures and aware of attack methods. A robust cybersecurity education and awareness programme is the best way to achieve this. You should tailor this programme for your organisation by identifying the critical threats and customising the content to address these threats. 2. Third-party risk management Third-party risk management (TPRM) is the process of analysing and minimising the cybersecurity risks associated with outsourcing to third-party vendors or service providers. It involves effective selection, due diligence, contracting, ongoing monitoring and the correct termination processes. 3. Malware and ransomware prevention Anti-malware and ransomware detection technologies can help to reduce the risk of a severe cyber attack likely to cause operational, reputational and financial damage to your organisation. Detection and response tools can be used to identify malware and limit the blast radius of the attack, for example. 4. Incident management and response With organisations facing more regulations than ever, the capacity to respond to a data breach quickly and effectively has never been so important. Senior executives should test their incident response capabilities and muscle memory with simulated strategic and tactical tabletop exercises. Incident response plans should be enhanced based on the learnings from these exercises. This documentation can include communication statements, runbooks for technical responses to ransomware, and breach notification processes for notifying the Data Protection Commission of a personal data breach. Implementing these controls can help to mitigate the financial and reputational impact of a security breach. Prioritisation You cannot eliminate cyber risk, but prioritising retail-specific cyber threats can help to mitigate the potential risks and damage. An effective cybersecurity programme will ensure that you can prepare, withstand, recover and learn from malicious attacks and security events online. Will O’Brien is Director of Cyber Practice at PwC

Gender allyship can help to support workplace equity, but only when it is genuine and meaningful. Andrea Dermody offers her advice on how to embed a culture of true support and allyship Harvard Business Review defines gender allyship as the purposeful collaboration of dominant group members (men) with women to actively promote gender equality and equity in their personal lives and the workplace through supportive and collaborative relationships, acts of sponsorship, and public advocacy to drive systemic change. While allyship can be a powerful tool for creating inclusive and equitable environments, however, there are instances in which it might not be as effective as intended. Research has suggested a stark perception gap between what men think they are doing to support women versus what they are actually doing.  The recent Allyship-In-Action study of more than 1,400 men and women found 78 percent of men said they had personally given a woman credit for her contributions and ideas in a meeting in the previous year. Just 49 percent of the women in the study reported witnessing such behaviour during that period. Despite good intentions, the effectiveness of men’s allyship efforts may be limited by several factors, including: Superficial engagement: Some allyship efforts may lack genuine commitment and understanding of the issues at hand.  Tokenism and performative actions: Both can create an illusion of support without leading to meaningful change. Lack of accountability and measurement: Allyship efforts can lack direction and fail to produce tangible outcomes without clear accountability and measurable goals. Resistance to change and inclusivity: Resistance from certain individuals or groups within the organisation can hinder effective allyship efforts.  In short, allyship is more than just ‘talking the talk’. It’s about fundamentally changing attitudes and behaviours. Simply calling yourself an ally to any person of an underrepresented group misses the point of allyship altogether.  Steps to successful allyship The secret to successful, long-lasting allyship lies in the combination of interpersonal action (developing awareness and motivation) and public action to create accountability and transparency. Here are five steps you can take to help allyship succeed in your organisation.  Educate yourself: Don’t ask people from marginalised backgrounds to take on the emotional, psychological and physical burden of educating you. Take responsibility for yourself. This list of resources from the University of Kent is a great place to start. Listen: Actively listen and amplify the voices of the communities for which you are trying to be an ally. Without listening, you have the danger of venturing into ‘saviour’ territory, where you assume you know more about what marginalised groups need than those in that group. Your actions become self-serving, and you benefit more than the groups you are trying to help.  Reflect on your privileges: The word “privilege” can be polarising, but it is essential to recognise the privileges you have to be an ally for others. Use your voice to make the voices of marginalised people heard. Use your privilege and influence to advocate for change and promote inclusivity. Stand up against discriminatory practices, biases and systemic injustices.  Mentor others: As an ally, showing your support through mentoring programmes is a great idea. By getting to know your mentee as an individual, you can learn about their experiences and perspectives. The more you know and understand, the better equipped you will be to help. See something, say something: Speak out in support of marginalised groups and actively challenge discriminatory behaviours and policies within your sphere of influence. If you see someone being discriminated against, support them at that moment, not later. Intervene even if the targeted individual or community is not present. By demonstrating that you don’t find it appropriate, you can help change the culture and create a more inclusive and equitable society.  Remember, though, that allyship is an ongoing journey that requires continuous self-reflection, learning and active engagement – it’s playing the long game for success. Andrea Dermody is a diversity and inclusion consultant, speaker and coach at Dermody

New approaches to infrastructure investment will be essential if Northern Ireland is to leave a positive economic and climate legacy for future generations, writes Kaine Lynch Infrastructure is a fundamental building block of society. It brings us together, protects the environment and supports economic growth. The benefits of enhanced infrastructure are more important today than ever before, given the need to boost the economy in Northern Ireland (NI) and meet legislative obligations concerning climate change. NI’s neighbours are making significant headway in relation to infrastructure. Earlier this month, the National Infrastructure Commission (NIC) in London published its second National Infrastructure Assessment (NIA) while the Irish Government unveiled plans for an Infrastructure, Climate and Nature Fund. In contrast, NI’s Department of Finance (DoF) recently commenced a consultation on potential revenue-raising measures necessitated by extreme pressures on public finances. NI’s lack of wastewater infrastructure constrains development, demand for social housing is outstripping supply, public transport usage lags behind the rest of the UK and the road network is deteriorating rapidly. These issues won’t resolve themselves. If we don’t act, NI’s infrastructure will continue to deteriorate, and our children will inherit an even larger infrastructure deficit.  However, there are several actions NI can take to address this. Long-term strategy Critical to the success of any endeavour is a plan. While there are several infrastructure-related strategies, NI does not have a cross-sectoral one akin to the UK’s National Infrastructure Strategy or the National Development Plan in Ireland. Like the approach adopted by the NIC, the development of a plan must begin with a clear understanding of NI’s current baseline and relevant sectoral priorities. This evidence-based approach will allow the region to push beyond time horizons associated with political cycles and focus on the legacy we leave for the next generation. Prioritisation framework Given NI’s infrastructure deficit, it is inevitable that the development of an infrastructure plan will identify a longlist of challenges and an unaffordable list of potential interventions. Challenges must be systemically triaged to arrive at a realistic shortlist. The process should consider the maintenance, renewal and resilience of NI’s aging assets and constructing new ones. The process of triaging will require a single set of carefully developed criteria that identify relative priorities across the programme. It will also be necessary to apply the criteria strictly and consistently. Without this uniform approach, it will be impossible to robustly make difficult decisions to invest in one thing over another. The analysis will, of course, also identify lower priorities. Existing projects aimed at addressing these should be carefully considered. Continuing to develop lower priority projects will result in fewer remaining resources to focus on addressing those of higher importance. Commercial models In addition to prioritisation, there is a need to critically examine how NI’s financial envelope for infrastructure can be expanded. The recently published NIA identifies that private sector investment will account for around 50 percent of total infrastructure investment over the next two decades. However, NI remains heavily reliant on public sector funding. Opportunities exist to chart a new course and better leverage private sector investment, whether it be to develop NI’s electric vehicle charging network or increase housing stock. The potential introduction of revenue-raising measures as outlined by the DoF would pave the way for reduced reliance on the public purse and unlock potential lending opportunities to support ‘invest to save’ initiatives. The UK Infrastructure Bank, established in 2021, presents an opportunity for the Executive and councils to temporarily expand their financial envelope. The Executive can also access Reinvestment and Reform Initiative borrowing at even more competitive rates. Delivery structures NI has immensely talented infrastructure professionals. Individuals are limited, however, and expertise is dispersed across the public sector. These factors make it difficult to deploy the right skills to the right place at the right time, reducing the likelihood of project success. The UK Government Commercial Function and the Infrastructure and Projects Authority are models in which skills and resources are held centrally but deployed to departments to support delivery. Implementing a similar approach in NI would allow the pooling of limited skilled resources, develop deep infrastructure delivery expertise and deploy resources to where they are needed most while ensuring funding departments retain overall accountability and control. Kaine Lynch is Director of Government and Infrastructure Advisory at EY. You can read more here.

The consolidation underway in the global accountancy sector is set to continue in the New Year, driven by several factors, writes Mark Butler The global accountancy sector is experiencing a wave of consolidation driven by advances in technology, regulatory developments, succession challenges and the need for firms to enhance their service offering. Larger firms are seeking to increase their market share and capabilities by merging with or acquiring smaller, specialised operators. Hence, we are seeing more consolidation driven partly by the need to embrace digital transformation. This means that the traditional model of individual client acquisition is giving way to a more interconnected, specialist-driven model. Embracing digital tools and diverse distribution channels is becoming increasingly important for accountancy firms that want to stay competitive.  In 2024, we can expect to see a further rise in strategic mergers and greater emphasis on cultural alignment post-merger. Cultural alignment in mergers Merging firms must prioritise cultural alignment to ensure a smooth transition and harmonious collaboration. The success of a merger hinges on the compatibility of organisational cultures, values and work styles. This is especially true in Ireland, where the close-knit business community values relationships and a shared ethos. Client-first approach In Ireland’s accountancy sector, engagement and expertise are crucial for clients and younger professionals seeking to build their career. Being part of a firm where decisions are made locally provides a sense of identity and contributes to the long-term commitment of the merging partners. This trend is particularly evident as younger professionals seek alignment with firms that share their values. Strategic mergers for career growth Younger accounting professionals in Ireland are increasingly aware of the options available to them for career progression, and the potential impact mergers can have on their career trajectory. A merger with the right firm can help to enhance career prospects, leverage a broader client base, and access additional resources. Access to an international network is key to forward-thinking firms keen to ensure they retain clients as they in turn need access to global support.    Leadership trends In addition to digitalisation, consolidation and strategic mergers, firms also need to prioritise the recruitment of leaders who have the multifaceted skills to adapt to the evolving needs of the accountancy sector. Recruiting multifaceted leaders Accountancy firms should actively recruit leaders who have additional skills over and above core technical requirements – such as business development and innovation, for example. The ability of professionals to be willing and open to widening their skill base can help to ensure a firm's agility and adaptability in a rapidly changing environment. Cultivating leaders To drive ongoing growth, a clear view of the market is essential to ensure real, meaningful engagement with a firm’s target market. This targeted leadership approach ensures a deep understanding of evolving client needs and industry trends and, when done well over a sustained period of time, can yield significant benefits. Business development Emphasising business development as a core requirement for professionals leading specific functions within the firm is crucial. Growth doesn’t happen accidentally. Firms focusing on effective pipeline management for recurring revenue and project work tend to maximise opportunities, aligning business development strategies with growth objectives. Thriving in an evolving landscape The accountancy sector is undergoing transformation, led by consolidation, strategic mergers and digitalisation. Professionals and firms that prioritise cultural alignment and strategic growth strategies will likely thrive in this evolving landscape. Embracing change and investing in the right talent and technologies will be essential to navigating the challenges and opportunities that lie ahead and ensuring sustained success for accountancy practices in the future. Mark Butler is Managing Partner at HLB Ireland

Geopolitical uncertainty is reshaping boardroom priorities and acquiring the right expertise is crucial for strategic resilience, writes Dan Byrne Geopolitical risk: Is your board talking about it? If so, do they know how to handle it? The harsh reality is that many companies can’t do so properly. However, stakeholders are rarely patient when it comes to geopolitics. When something happens, they want a response from your corporate leadership.  The last thing your board needs to be is unaware of how to handle a situation, what to say, and how to adapt your strategy to changing global events. The challenge is processing that it’s all happening at once.  The news cycle is now dominated by the Israel-Hamas war. Before this started, the spotlight was on the Russian invasion of Ukraine and, before that, the chaotic US withdrawal from Afghanistan.  Meanwhile, we’ve got tensions between the West and China, the right-wing backlash against Brazilian and US elections, and unresolved Brexit issues – not to mention the protracted conflicts that are now so ingrained in the fabric of modern geopolitics. Every geopolitical crisis begins a new chapter of geopolitical pressure in corporate playbooks. The importance of geopolitical risk Assessing geopolitical risk is essential. It’s not going away and, depending on your company, it could be crucial to your strategy.  This doesn’t have to be direct – your company’s stance on a particular issue, for example. It can also be indirect – such as the businesses you work with within your supply chain. Many American companies have been shifting their manufacturing from China to other locations, such as Vietnam, out of fear that Chinese authorities could disrupt their business at the drop of a hat. Corporate leaders will be prodded by investors wanting to know if their company can survive through sanctions or consumers wanting to see their response to escalating conflict. The storm of questions will come; the challenge is how best to weather it. Expertise needed Experts in geopolitical risk will have the following skills: A deep understanding of corporate strategy and risk; Knowledge of global affairs, new or potential conflicts with global impacts, the intricacies of trade sanctions and the knock-on effects of government changes on international relations; and The ability to navigate through substantial geopolitical fallouts. The hard part is finding this expertise. Finding the right candidate to fill a board seat depends on multiple factors, like the availability of talent, training, networks, and an alignment of values. In some situations, this is a heavy ask.  It’s also worth noting that the market for geopolitical expertise is highly active right now as companies realise that they need to be prepared. Playing the long game Organisations should realise that the quest for geopolitical experience for your board may be a long game.  It can take time to find the talent that works well for your business – and it’s time that stakeholders may not always give you, pushing you for an answer and refusing to accept that you might need more time. That’s why it is essential to start now on geopolitical expertise if you haven’t already. If it feels like you’re playing catch-up, bear in mind that this won’t always be the case. Eventually, you will have the solid knowledge you need on your board to help you develop thorough answers to complex questions.  In reality, the world always moves faster than corporate governance is comfortable with, so it’s better to get ahead. Dan Byrne is a content writer at The Corporate Governance Institute

Navigating the intricate blend of personal and professional dynamics in family businesses presents unique challenges. Emma Richmond explores effective strategies for success and harmony By their nature, family businesses are a unique blend of personal dynamics and professional responsibilities. When an employee complains that the CEO’s daughter has been bullying them or an uncle has given himself a secret pay raise, it can become a significantly bigger issue for a family business than for any other. While allegations of bullying and financial impropriety can arise in any business, dealing with them in a family business can be particularly tricky – as you try to address the issues while also attending the annual family picnic, for example. There are many positives to a family business, however, such as shared values, deep trust, and long-term commitment. Still, we cannot deny that they face unique and added challenges. Being prepared for these challenges and putting in place the right structures can help to strike a balance and ensure the overall success of your family business. Here’s how to do it: Family versus professional roles One of the most common challenges in family businesses is distinguishing between family and professional roles. It can be difficult for an older brother to take instruction from a younger sister or an aunt to take instruction from a nephew. The very dynamic of a family business means that members wear multiple hats, serving as both relatives and employees or managers. These overlapping roles can lead to blurred boundaries and potential conflicts of interest. Establishing clear guidelines and communication channels that foster professionalism and respect is crucial, ensuring that personal relationships do not overshadow business decisions. It is also important to clearly document roles and responsibilities in employment contracts so that there is clarity on all sides. Succession planning and leadership Succession planning is critical in family businesses. Determining who will take over leadership roles and ensuring a smooth transition requires careful consideration. Emotions and family dynamics can complicate this process, leading to disagreements, power struggles, and potential talent gaps. Creating a structured succession plan that includes objective criteria for selecting successors, open communication, and opportunities for non-family members to contribute to the company’s growth is essential. As with all recruitment and promotions, a clear and transparent process can help to avoid conflicts. Managing performance and meritocracy Maintaining a fair and merit-based performance evaluation system is crucial for the long-term success of any business. However, in family businesses, there can be a perception of favouritism or nepotism, particularly if family members receive preferential treatment or promotions based on their surname rather than their abilities. Implementing transparent performance evaluation processes and detailing this in a policy, providing developmental opportunities for all employees, and actively encouraging a culture of recognition can help mitigate such concerns. Conflict resolution and communication Conflicts are inevitable in any workplace, but they can be especially complex in family businesses due to existing personal relationships. Disagreements among family members can quickly escalate, affecting work dynamics and family harmony. Effective conflict resolution strategies, such as regular family meetings, mediation, and open and honest communication, can help to address conflicts promptly and maintain a harmonious work environment. Retaining and attracting non-family employees Family businesses often face challenges in attracting and retaining non-family employees. These employees may perceive limited growth opportunities or feel excluded from key decision-making processes. To counter this, family businesses should: foster a culture that values and respects the contributions of non-family employees; ·offer competitive compensation packages; provide opportunities for career growth; and establish transparent promotion processes based on merit rather than familial ties. More often than not, non-family employees will embrace the culture of trust and shared values as demonstrated by the family members themselves, which can in itself create a very loyal employee. Maintaining balance Managing issues in family businesses requires a delicate balance between preserving family dynamics and fostering a professional work environment. By addressing the challenges of family roles, succession planning, performance evaluation, conflict resolution, and employee retention, family businesses can navigate these issues effectively and thrive in the long term. Clear employment contracts and policies will go a long way to maintaining a healthy and successful balance between family and business in these unique organisations. Emma Richmond is a partner with Whitney Moore