Retail industry steps up the fight against rising cyber threats

Industry and government welcomes toolkit

Home office minister Sarah Newton said crime is changing and therefore the way everyone works to tackle it also needs to change.

“We are already taking world-leading action to stamp out cyber crime and fraud, including investing £1.9bn in cyber security over five years. But, as we have said, the government cannot do this alone.

“Businesses have a responsibility to take steps to protect themselves and their customers, which is why we are delighted that the BRC has introduced their cyber security toolkit to help retailers to do so,”  she said.

Hugo Rosemont, policy adviser on crime and security at BRC, said the UK is one of the leading e-commerce markets in the world.

“The BRC Cyber Security Toolkit is designed to equip British retailers with the know-how, guidance and practical support that will help the industry stay ahead of the ever evolving threats posed by cyber-related criminality.

“All parts of the retail industry have a large and growing stake in keeping customers safe and secure, and the industry is committed to ensuring the strongest possible measures are in place – all the way through from prevention to incident response,” he said.

Ian Levy, technical director at the National Cyber Security Centre (NCSC), said the retail sector is vital to the UK’s economic well-being and both the sector and its supply chain are increasingly reliant on online safety and security.

“The NCSC is delighted to be working with the BRC in finding innovative ways to make the UK a safe place for citizens, e-commerce, small businesses and large chains to do retail business online.

“We are committed to giving individuals and businesses of all sizes confidence to deliver success in our increasingly digitalised economy, and were pleased to support the development of this toolkit,” he said.

The official launch of the toolkit comes a day after UK information commissioner Elizabeth Denham called on UK businesses to adopt a deeper and broader focus on data protection.

The EU General Data Protection Regulation (GDPR), which becomes enforceable by law in May 2018, will require organisations to make personal privacy rights of consumers a top priority, she said.

While the GDPR gives specific new obligations for organisations, for example around reporting data breaches and transferring data across borders, Denham emphasised that the real change for organisations will be understanding the new rights for consumers.

“I want to see comprehensive data programs as the norm, organisations better protecting the data of citizens and consumers, and a change of culture that makes broader and deeper data protection accountability a focus for organisations across the UK,” she said.