This study aims to analyze the effectiveness of implementing information security management strategy to reduce the threats of information breaches and cyber attacks in the UK retail sector. The study focuses on Marks and Spencer, a British multinational fashion retail company, and its issue of epsilon data breach. The study includes a literature review, qualitative methodology, primary investigation through a survey, and conclusion and recommendations.