Article Per Year (5 Year)
p-Index From 2021 - 2026
0.751
P-Index
This Author published in this journals
All Journal Indonesian Journal of Electrical Engineering and Computer Science INOVTEK Polbeng - Seri Informatika Journal of Applied Computer and Information Technology
Mohamad Fadli Zolkipli
Universiti Utara Malaysia
Computer Science & IT

Published : 4 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search
Journal : journal of applied computer and information technology

 1 
Cybersecurity risk management for digital retail: Strategies, frameworks and implementation Nurul Hanna Mohd Saleh; Nur Anis Atiqah Hussin; Maharubiney Suthursan Kumar; Mohamad Fadli Zolkipli
Journal of Applied Computer and Information Technology Vol. 1 No. 1 (2026): Journal of Applied Computer and Information Technology (JACoIT)
Publisher : Global Research Innovation

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.67131/jacoit.v1i1.6

Abstract

The digital transformation of wholesale, supermarket and e-commerce operations has rendered cybersecurity a cornerstone of business resilience in the modern trading and retail sector. This study examines the critical cybersecurity threats facing this industry through a qualitative risk assessment, identifying phishing, ransomware, supply chain attacks and data breaches as the most prevalent and impactful risks. The analysis underscores that these threats exploit the sector's inherent characteristics: high transaction volumes, reliance on interconnected digital ecosystems and the processing of large quantities of sensitive customer data. In response, the study advocates for a strategic, integrated approach to cybersecurity governance. It proposes that combining the risk-based structure of the NIST Cybersecurity Framework (CSF) with the prescriptive payment security controls of the PCI DSS and the governance rigor of ISO/IEC 27001 provides a comprehensive model for effective risk mitigation. The findings highlight that moving beyond compliance-centric checklists to develop proactive cyber resilience is crucial. This requires strategic investments in foundational controls, robust incident response planning and strict third-party risk management to safeguard operations, ensure regulatory adherence and maintain customer trust in an increasingly hostile digital landscape.
Cybersecurity risk management strategy for AI and SaaS platforms: A NIST framework approach Muhammad Zaim Zainuddin; Muhammad Sharin Yasin; Muhammad Azerul Azaman; Mohamad Fadli Zolkipli
Journal of Applied Computer and Information Technology Vol. 1 No. 1 (2026): Journal of Applied Computer and Information Technology (JACoIT)
Publisher : Global Research Innovation

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.67131/jacoit.v1i1.9

Abstract

The rapid growth in Information Technology (IT) and Software industries particularly within Artificial Intelligence (AI) and Software-as-a-Service (SaaS) has accelerated the pace of the fourth industrial innovation, and at the same time, this growth produced complex vulnerabilities to security. The conventional defense mechanisms are becoming less effective over time against the evolving threats like adversarial data poisoning, API exploits and advanced ransomware attacks targeting cloud infrastructures. The primary goals of this paper are to address these issues by developing a comprehensive risk management plan that is based on the NIST Cybersecurity Framework (CSF). Additionally, this study identifies critical vulnerabilities in modern AI and SaaS environments using a qualitative risk assessment approach and a likelihood-versus-impact matrix. The analysis shows that data breaches and API exploitation are the most serious threats, which have significant impact on organization operations and the high likelihood. Moreover, the findings indicate that incorporating the NIST CSF core capabilities such as Identify, Protect, Detect, Respond and Recover is a well-organized framework of minimizing these high-priority threats using layered preventive and detective controls. Ultimately, the results highlight how important it is to embrace standards-based systems to shift organizations from reactive security measures to proactive resilience to ensure the integrity and continuity of the interconnected software ecosystem.
Co-Authors Ang Jin Sheng Bingxin Jin Hapini Awang Izwan Nizal Mohd Shaharanee Jastini Mohd Jamil Maharubiney Suthursan Kumar Muhammad Azerul Azaman Muhammad Sharin Yasin Muhammad Zaim Zainuddin Nur Anis Atiqah Hussin Nur Anis Shafiqah Mazlan Nur Suhaili Mansor Nurul Hanna Mohd Saleh