Journal of Applied Computer and Information Technology
Vol. 1 No. 1 (2026): Journal of Applied Computer and Information Technology (JACoIT)

Cybersecurity risk management for digital retail: Strategies, frameworks and implementation

Nurul Hanna Mohd Saleh (Universiti Utara Malaysia)
Nur Anis Atiqah Hussin (Universiti Utara Malaysia)
Maharubiney Suthursan Kumar (Universiti Utara Malaysia)
Mohamad Fadli Zolkipli (Universiti Utara Malaysia)



Article Info

Publish Date
02 Apr 2026

Abstract

The digital transformation of wholesale, supermarket and e-commerce operations has rendered cybersecurity a cornerstone of business resilience in the modern trading and retail sector. This study examines the critical cybersecurity threats facing this industry through a qualitative risk assessment, identifying phishing, ransomware, supply chain attacks and data breaches as the most prevalent and impactful risks. The analysis underscores that these threats exploit the sector's inherent characteristics: high transaction volumes, reliance on interconnected digital ecosystems and the processing of large quantities of sensitive customer data. In response, the study advocates for a strategic, integrated approach to cybersecurity governance. It proposes that combining the risk-based structure of the NIST Cybersecurity Framework (CSF) with the prescriptive payment security controls of the PCI DSS and the governance rigor of ISO/IEC 27001 provides a comprehensive model for effective risk mitigation. The findings highlight that moving beyond compliance-centric checklists to develop proactive cyber resilience is crucial. This requires strategic investments in foundational controls, robust incident response planning and strict third-party risk management to safeguard operations, ensure regulatory adherence and maintain customer trust in an increasingly hostile digital landscape.

Copyrights © 2026






Journal Info

Abbrev

jacoit

Publisher

Subject

Description

Journal of Applied Computer and Information Technology (JACoIT) is an international, peer-reviewed journal dedicated to publishing high-quality original research articles, reviews, and case studies in the domains of applied information technology, computer science, and computational systems. The ...