What Retailers Should Know About Cybersecurity This Holiday Season

This article has been indexed from

The Duo Blog

The holiday season is critical for the retail industry in the U.S., which has increasingly been facing cybersecurity challenges. Earlier this year, the Biden Administration’s Executive Order on Improving the Nation’s Cybersecurity aimed at improving efforts to “identify, deter, protect against, detect, and respond to these actions and actors.”

American consumers lost $56 billion to identity theft last year with an average of 49 million consumer victims, according to a CNBC News report. The 2021 Identity Fraud Study by Javelin Strategy & Research reports the identity fraud resulted from stolen personally identifiable information (PII) and data breaches. Retailers have to protect consumer PII and stay compliant to PCI DSS, GDPR, CPPA and more. The breaches could easily be prevented by leveraging a zero trust security posture and implementing multi-factor authentication (MFA)

The 2021 Executive Order from the White House in conjunction with the Federal Trade Commission outlined MFA as a security requirement for all federal contracts to apply to manufacturers of retail Internet of Things (IoT) devices and software. This indicates that the software systems retailers use will soon follow stricter cybersecurity hygiene practices detailed in the Executive Order. PCI DSS already requires MFA as a standard to protect PII of consumers for multi-layered protection.

“A secure authentication experience is a foundational security control for any organization. It is also the control that every employee, contractor and partner sees. Using continuous trusted access policies to manage

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

Read the original article: