M&S one year on: turning anticipation into secure by design | Computer Weekly

"The cyber attack on M&S last year marked a turning point for resilience in the retail sector. One year on, knowing how to avoid the next incident is no longer the priority and being ready for when it happens is key."

"Retailers are ecosystems of interconnectedness that has become a critical vulnerability. A single compromised supplier can provide attackers with the foothold they need further up the supply chain."

"Supplier assurance is often treated as a compliance exercise, focused on periodic questionnaires and tick-box reviews, rather than a continuous, risk-based process. But attackers don't operate on annual cycles."

The retail sector faces increasing cyber threats, necessitating a shift from prevention to preparedness for incidents. Retailers hold valuable customer data and operate complex supply chains, making them attractive targets. Cyber incidents now impact customer trust and business operations significantly. Third-party relationships introduce vulnerabilities, as a compromised supplier can jeopardize the entire supply chain. Many organizations fail to ensure robust supplier assurance, treating it as a compliance task rather than a continuous risk management process. Retailers need ongoing visibility into their supply chains to mitigate risks effectively.

Read at ComputerWeekly.com