Comprehensive Information Security Compliance Plan: Wal-Mart

This presentation provides a comprehensive information security compliance plan for Wal-Mart, addressing strategic leadership and governance, including overall strategy, IT governance, and risk assessment. It delves into managerial and operational aspects such as security management, policies, program management, and user security. The plan also covers technical elements, focusing on technology protection, asset inventory, incident management, and disaster recovery. The presentation emphasizes the importance of cybersecurity, data privacy, vendor management, and compliance with legal and regulatory requirements to protect Wal-Mart's assets and customer data. The solution details risk identification, mitigation strategies, and the integration of technologies like AI, big data, and machine learning to enhance security measures. Furthermore, it outlines the ethical conduct and privacy policies followed by the company, ensuring a robust and adaptable security framework.

Wal-Mart
An organization that
provide best facilities to
their customers

Introduction of Wal-Mart
 A company that provide best products
and services to their customers using
latest technologies and concepts with
number of good offers.
 The company was founded by Sam
Walton in 1962
 Wal-Mart has latest architecture of
security and privacy of data and
information

Strategic: Leadership and
Governance
 The company follows a hierarchical organziation
structure to manage their various business
function in proper way. The company can
include hybrid organizational structure to
improve their strategies.
 It provides many benefits to the company and
its stakeholders (Parboteeah, & Cullen, 2013).

Overall Strategy
 Price : Less price high profit
from the number of
customers
 Access: provide proper
access to each employees
based on their status.
 Assortment : the company
can make processes more
proper and secure
 Experience: take experience
from the feedback of the
clients and survey about the
shopping and products.

Strategy of Wal-Mart

IT Governance
 Strategic alignment: the company will
manage all the things using frameworks,
such as ITIL, TOGAF, ISO 27001, and many
others.
 Value delivery: Wal-Mart will deliver best
value to their customers
 Risk management: Wal-Mart will manage
their different risks using proper
cybersecurity and other framework for
asset management.
 Resource management: company will
manage their resources using proper
policies to secure their resources.
 Performance management: it is necessary
for different impartments in the business
functions. It will provide more benefits to
the company.

Risk Assessment
 Risk identification: Wal-Mart faced data
breach in 2015 of 13, 00,000 user data.
It makes a huge impact on the
company’s reputation.
 Risk Prioritization: the company should
provide priority to customer’s data.
 Control Evolution: company should
implement cybersecurity standard to
prevent whole system from cyber-
attacks.
 Gap analysis: the company must
compile gap-analysis for their security
systems and make proper arrangement
of them, such as threats, vulnerability,
and more.
 Mitigation plan: the company should
have mitigation plan to solve many
issues related to their security.

Security Management
 Artificial intelligence must use by
the company, as it will provide
benefits in their security
management.
 Big data will provide many
advantages to the company in
their security management, such
as suspicious activity in the
network.
 Machine learning will provide help
in their research and identification
of security systems.
 Monitor and control facility: it will
provide more security to the
company in case of data breach
and other security related issues.

Security Policies &
Standards
 Data access policy: data
centre will be secure
using firewalls and IDS
systems and all the
documents will secure
form the legal and
company rules and
regulations.
 Digital data: it will secure
using proper
management of data on
cloud-based services.

Security Program
Management
 Monitoring & Audit:
Wal-Mart uses robots in
more than 50 stores to
monitor and audit all the
business processes to
provide security. The
company can improve
this concept using IoT-
based service and RFID.
It will more secure all the
resources of the
company.

Compliance/Controls
 Wal-Mart is using financial audit through software.
It is the best way to audit all the documents in a
proper way. The company can use ViRP, AIX, Cisco
UCS, ForeScout, and many other integrated
compliance monitoring and reporting tools. It will
helpful for the company in reporting on emails on
a weekly and daily basis for review.

Vendor Management
 Wal-Mart uses proper
system for vendor
management. There are
selection procedures of
Wal-Mart for vendors.
the company can use
SAP’s supplier
management tool for
management of
vendors and suppliers
of the company(Hwang,
Wei,& Lee, 2009).