• Current students
      • Student centre
        Enrol on a course/exam
        My enrolments
        Exam results
        Mock exams
      • Course information
        Students FAQs
        Student induction
        Course enrolment information
        F2f student events
        Key dates
        Book distribution
        Timetables
        FAE elective information
        CPA Ireland student
      • Exams
        CAP1 exam
        CAP2 exam
        FAE exam
        Access support/reasonable accommodation
        E-Assessment information
        Exam and appeals regulations/exam rules
        Timetables for exams & interim assessments
        Sample papers
        Practice papers
        Extenuating circumstances
        PEC/FAEC reports
        Information and appeals scheme
        Certified statements of results
        JIEB: NI Insolvency Qualification
      • CA Diary resources
        Mentors: Getting started on the CA Diary
        CA Diary for Flexible Route FAQs
      • Admission to membership
        Joining as a reciprocal member
        Admission to Membership Ceremonies
        Admissions FAQs
      • Support & services
        Recruitment to and transferring of training contracts
        CASSI
        Student supports and wellbeing
        Audit qualification
        Diversity and Inclusion Committee
    • Students

      View all the services available for students of the Institute

      Read More
  • Becoming a student
      • About Chartered Accountancy
        The Chartered difference
        Student benefits
        Study in Northern Ireland
        Events
        Hear from past students
        Become a Chartered Accountant podcast series
      • Entry routes
        College
        Working
        Accounting Technicians
        School leavers
        Member of another body
        CPA student
        International student
        Flexible Route
        Training Contract
      • Course description
        CAP1
        CAP2
        FAE
        Our education offering
      • Apply
        How to apply
        Exemptions guide
        Fees & payment options
        External students
      • Training vacancies
        Training vacancies search
        Training firms list
        Large training firms
        Milkround
        Recruitment to and transferring of training contract
      • Support & services
        Becoming a student FAQs
        School Bootcamp
        Register for a school visit
        Third Level Hub
        Who to contact for employers
    • Becoming a
      student

      Study with us

      Read More
  • Members
      • Members Hub
        My account
        Member subscriptions
        Newly admitted members
        Annual returns
        Application forms
        CPD/events
        Member services A-Z
        District societies
        Professional Standards
        ACA Professionals
        Careers development
        Recruitment service
        Diversity and Inclusion Committee
      • Members in practice
        Going into practice
        Managing your practice FAQs
        Practice compliance FAQs
        Toolkits and resources
        Audit FAQs
        Practice Consulting services
        Practice News/Practice Matters
        Practice Link
      • In business
        Networking and special interest groups
        Articles
      • Overseas members
        Home
        Key supports
        Tax for returning Irish members
        Networks and people
      • Public sector
        Public sector presentations
      • Member benefits
        Member benefits
      • Support & services
        Letters of good standing form
        Member FAQs
        AML confidential disclosure form
        Institute Technical content
        TaxSource Total
        The Educational Requirements for the Audit Qualification
        Pocket diaries
        Thrive Hub
    • Members

      View member services

      Read More
  • Employers
      • Training organisations
        Authorise to train
        Training in business
        Manage my students
        Incentive Scheme
        Recruitment to and transferring of training contracts
        Securing and retaining the best talent
        Tips on writing a job specification
      • Training
        In-house training
        Training tickets
      • Recruitment services
        Hire a qualified Chartered Accountant
        Hire a trainee student
      • Non executive directors recruitment service
      • Support & services
        Hire members: log a job vacancy
        Firm/employers FAQs
        Training ticket FAQs
        Authorisations
        Hire a room
        Who to contact for employers
    • Employers

      Services to support your business

      Read More
☰
  • Find a firm
  • Jobs
  • Login
☰
  • Home
  • Knowledge centre
  • Professional development
  • About us
  • Shop
  • News
Search
View Cart 0 Item

Knowledge Centre

☰
  • Home/
  • News/
  • Knowledge centre news item
☰
  • News
  • News archive
    • 2024
    • 2023
  • Press releases
    • 2025
    • 2024
    • 2023
  • Newsletters
  • Press contacts
  • Media downloads

Keeping secure this Cyber Monday

Nov 24, 2023

Retailers face escalating cyber security challenges during peak events such as Cyber Monday. Will O’Brien outlines four steps to protect customer data this holiday season

In the retail sector, cyber security often lags behind other sectors regardless of the retailer’s size or value.

In the short-term, this can lead to some initial minor inconveniences, but if left unattended, it can manifest into serious issues that impact the organisation’s brand, reputation and customer loyalty.

The security challenge

During the peak Christmas consumer events of Black Friday and Cyber Monday, the retail sector sees a sharp uptake in business.

As a result, its value to malicious actors also increases.

To leverage this busy period, cybercriminals use unsophisticated phishing campaigns to gain access and steal data.

when a retailer’s ‘accounts and billing’ function is in full swing during the holiday season, for example, they are more likely to fall victim to a phishing attack.

While some retailers have reasonable controls in place to protect against these attacks, many rely heavily on insecure third parties to fulfil critical business functions.

According to PwC’s 2023 Digital Trust Insights Survey, supply chain risks have become a big focus for regulators and organisations, with senior executives in Ireland identifying increased regulatory scrutiny as one of the top five impacts on their business since 2022.

Without conducting the correct level of cybersecurity due diligence on third parties, retailers can open themselves up to cyber-attacks by providing third parties with access to their data.

If these third parties fall victim to cyber-attacks, the organisation’s data – through payroll, accounts and shipping, for example – may be at risk.

Despite the third party being at fault, the data controller (the organisation) is subject to fines and reputational impact.

Defending consumer data

Organisations can protect their digital assets by understanding the retail-specific cyber threats and associated remediation activities.

1. Education and awareness 

Your people are your first line of defence against phishing campaigns. All staff should be educated on security procedures and aware of attack methods. A robust cybersecurity education and awareness programme is the best way to achieve this.

You should tailor this programme for your organisation by identifying the critical threats and customising the content to address these threats.

2. Third-party risk management

Third-party risk management (TPRM) is the process of analysing and minimising the cybersecurity risks associated with outsourcing to third-party vendors or service providers. It involves effective selection, due diligence, contracting, ongoing monitoring and the correct termination processes.

3. Malware and ransomware prevention

Anti-malware and ransomware detection technologies can help to reduce the risk of a severe cyber attack likely to cause operational, reputational and financial damage to your organisation.

Detection and response tools can be used to identify malware and limit the blast radius of the attack, for example.

4. Incident management and response

With organisations facing more regulations than ever, the capacity to respond to a data breach quickly and effectively has never been so important.

Senior executives should test their incident response capabilities and muscle memory with simulated strategic and tactical tabletop exercises. Incident response plans should be enhanced based on the learnings from these exercises.

This documentation can include communication statements, runbooks for technical responses to ransomware, and breach notification processes for notifying the Data Protection Commission of a personal data breach.

Implementing these controls can help to mitigate the financial and reputational impact of a security breach.

Prioritisation

You cannot eliminate cyber risk, but prioritising retail-specific cyber threats can help to mitigate the potential risks and damage.

An effective cybersecurity programme will ensure that you can prepare, withstand, recover and learn from malicious attacks and security events online.

Will O’Brien is Director of Cyber Practice at PwC

The latest news to your inbox

Please enter a valid email address You have entered an invalid email address.

Useful links

  • Current students
  • Becoming a student
  • Knowledge centre
  • Shop
  • District societies

Get in touch

Dublin HQ

Chartered Accountants
House, 47-49 Pearse St,
Dublin 2, D02 YN40, Ireland

TEL: +353 1 637 7200
Belfast HQ

The Linenhall
32-38 Linenhall Street, Belfast,
Antrim, BT2 8BG, United Kingdom

TEL: +44 28 9043 5840

Connect with us

Something wrong?

Is the website not looking right/working right for you?
Browser support
CAW Footer Logo-min
GAA Footer Logo-min
CCAB-I Footer Logo-min
ABN_Logo-min

© Copyright Chartered Accountants Ireland 2020. All Rights Reserved.

☰
  • Terms & conditions
  • Privacy statement
  • Event privacy notice
  • Sitemap
LOADING...

Please wait while the page loads.