Wal-Mart: Strategies for Security and Privacy Management

Explore the hierarchical organizational structure of Wal-Mart and its overall strategy for price, access, assortment, and experience. Learn about the company's IT governance, risk assessment, security management, compliance, vendor management, user security management, ethical conduct, privacy, and technical operations. Discover how Wal-Mart uses robots, cloud computing, network monitoring, and data centers to secure its data and other processes from cyber-attacks and data breaches.

Wal-Mart
An organization that
provide best facilities to
their customers

Introduction of Wal-Mart
 A company that provide best products
and services to their customers using
latest technologies and concepts with
number of good offers.
 The company was founded by Sam
Walton in 1962
 Wal-Mart has latest architecture of
security and privacy of data and
information

Strategic: Leadership and
Governance
 The company follows a hierarchical organziation
structure to manage their various business
function in proper way. The company can
include hybrid organizational structure to
improve their strategies.
 It provides many benefits to the company and
its stakeholders (Parboteeah, & Cullen, 2013).

Overall Strategy
 Price : Less price high profit
from the number of
customers
 Access: provide proper
access to each employees
based on their status.
 Assortment : the company
can make processes more
proper and secure
 Experience: take experience
from the feedback of the
clients and survey about the
shopping and products.

Strategy of Wal-Mart

IT Governance
 Strategic alignment: the company will
manage all the things using frameworks,
such as ITIL, TOGAF, ISO 27001, and many
others.
 Value delivery: Wal-Mart will deliver best
value to their customers
 Risk management: Wal-Mart will manage
their different risks using proper
cybersecurity and other framework for
asset management.
 Resource management: company will
manage their resources using proper
policies to secure their resources.
 Performance management: it is necessary
for different impartments in the business
functions. It will provide more benefits to
the company.

Risk Assessment
 Risk identification: Wal-Mart faced data
breach in 2015 of 13, 00,000 user data.
It makes a huge impact on the
company’s reputation.
 Risk Prioritization: the company should
provide priority to customer’s data.
 Control Evolution: company should
implement cybersecurity standard to
prevent whole system from cyber-
attacks.
 Gap analysis: the company must
compile gap-analysis for their security
systems and make proper arrangement
of them, such as threats, vulnerability,
and more.
 Mitigation plan: the company should
have mitigation plan to solve many
issues related to their security.

Security Management
 Artificial intelligence must use by
the company, as it will provide
benefits in their security
management.
 Big data will provide many
advantages to the company in
their security management, such
as suspicious activity in the
network.
 Machine learning will provide help
in their research and identification
of security systems.
 Monitor and control facility: it will
provide more security to the
company in case of data breach
and other security related issues.

Security Policies &
Standards
 Data access policy: data
centre will be secure
using firewalls and IDS
systems and all the
documents will secure
form the legal and
company rules and
regulations.
 Digital data: it will secure
using proper
management of data on
cloud-based services.

Security Program
Management
 Monitoring & Audit:
Wal-Mart uses robots in
more than 50 stores to
monitor and audit all the
business processes to
provide security. The
company can improve
this concept using IoT-
based service and RFID.
It will more secure all the
resources of the
company.

Compliance/Controls
 Wal-Mart is using financial audit through software.
It is the best way to audit all the documents in a
proper way. The company can use ViRP, AIX, Cisco
UCS, ForeScout, and many other integrated
compliance monitoring and reporting tools. It will
helpful for the company in reporting on emails on
a weekly and daily basis for review.

Vendor Management
 Wal-Mart uses proper
system for vendor
management. There are
selection procedures of
Wal-Mart for vendors.
the company can use
SAP’s supplier
management tool for
management of
vendors and suppliers
of the company(Hwang,
Wei,& Lee, 2009).

User Security
Management
 Education and
Training: Wal-Mart
provides VR devices to
their employees for
training and education.
The company can use
Augmented Reality (AR)
for training purpose. It will
improve the performance
of their employees (Chan,
2011).

Ethical Conduct
 The company follows
code of conducts for
employees and its
customers ( Choi, & Pae,
2011).
 It makes a good image in
whole world. It will make
a good image of the
company in the
international market (Wu,
Feng, Wang, & Liang,
2015).

Privacy
 Wal-Mart uses
cybersecurity for
providing security to the
data and information of
the company as well as
customers. It will
provide many benefits
to the company, such as
data breach,
authentication, and
many others

Technical: Technology
Protection and Operations
 Asset Inventory &
Management: Wal-Mart
has used robots for the
protection and other
operations
 It is the best process to
secure all the things. The
company can use ISMS
for secure all the things
from cyber-attacks

Incident Management
 Robots make a report for
that incident and provide
details to security
personals.
 They can take proper action
for that thing
 The company can use
network monitoring system
for monitoring suspicious
activities in the network,
such as Solarwinds,
PRTG, Nagios XI, Zabbix.

Technical Operations
 Wal-Mart uses cloud
computing services to
provide best facilities to
their customers
(Greenaway, Chan, &
Crossler, 2015).
 The company can use
network monitoring and
data centers to secure their
data and other processes
from cyber-attacks and
data breaches.

Physical and Environment
 The company provide full physical security to
thier customers and their assets. All the
information assets using cybersecurity.
 The security systems are enhanced to provide
the protection of the confidential data.
 The data is mostly saved on the clouds and
hence, it becomes necessary to take proper
care and protection of the confidential data

Disaster Recovery/Business
Continuity
 The company makes
backup of all the
business data
including inventory,
finance, customers
details and many
others.
 Business continuity
is necessary for the
organization.

Any queries
 Ask questions …??