Chapter 1: Securing the Retail Future. A Cybersecurity Imperative
Summary
Cybersecurity is critical to the future of retail. Our survey reveals a generally proactive approach, with 60% prioritising regular security updates and monitoring.
While 40% are reactive, addressing issues as they arise, the universal recognition of cybersecurity's importance is clear. However, this reactive minority remains vulnerable.
Retailers prioritise online store performance, especially during peak traffic. Reliance on hosting providers (58%) and CDNs/caching (47%) demonstrates a focus on scalable infrastructure.
Investments in hardware (45%) and bottleneck identification (42%) further this commitment. While only 1% haven't considered performance optimisation, the 13% experiencing slowdowns without implementing solutions risk losing customers.
AI adoption is widespread, with 61% exploring further uses after initial deployments and 39% already leveraging it for personalisation and inventory management.
This near-universal adoption highlights a drive for enhanced experiences and efficiency, but also raises cybersecurity concerns as these systems can become attack vectors.
Data breach preparedness is key. While 51% feel very prepared, 48% feel only somewhat prepared and 1% admitted to minimal preparedness, revealing a vulnerability within the industry. Given the increasing sophistication of cyberattacks, even this small percentage represents a risk.
Robust incident response plans, regular audits, and continuous training remain essential.
These findings show a sector that understands cybersecurity's importance but must continue evolving its strategies to meet emerging threats.
Skip to:
Question 1: What is your current approach to handling cybersecurity threats?
Question 2: How do you manage the speed and reliability of your online store, especially during peak traffic periods?
Question 3: How are you currently using AI in your retail operations?
Question 4: How prepared is your business to respond to a potential data breach?
What is your current approach to handling cybersecurity threats in your retail business?
Proactive – We regularly update and monitor our security measures.
Reactive – We address issues as they arise.
Basic – We have minimal security measures in place.
Not a priority – We have not faced significant threats yet.
"This isn’t a huge surprise. Retailers face immense pressure to launch new digital experiences, and simply may not have time to consider security proactively. With that being said, it’s worth investing in security automation capabilities to enable developers to launch new features and apps with critical protections already in place."
Martin Sanchez, Product Marketing manager, Cloudflare
How do you currently manage the speed and reliability of your online store, especially during peak traffic periods? (respondents were asked to select all options that apply)
We rely on our hosting provider to manage traffic
We use a combination of CDN and caching techniques
We have invested in hardware and infrastructure
We are implementing tools to identify bottlenecks
We use a CDN to ensure fast and reliable performance.
We are migrating to a cloud-based platform
We experience slowdowns but have no specific solutions
We haven’t considered performance optimization yet.
"The sad truth is performance at pace is fundamentally a cultural problem. These challenges are typically seen in larger organisations as, for various reasons, it can be harder to make changes, especially when it comes to making your website faster. If you have an agile and empowering culture then speed and reliability will follow very quickly. Focus on making the common case fast (whether it is a process, reviewing, testing, technical requirement, change, sign-off...well just everything you can influence), then, peak becomes no different to any other day."
Mark McKenzie, Technical Director, guitarguitar
How are you currently using AI in your retail operations?
We have implemented AI in some areas but are exploring further uses.
We use AI extensively, from personalised recommendations to inventory management.
We are considering AI but haven't implemented it yet.
We do not use AI and have no plans to do so.
How are you currently using AI in your retail operations?
We have implemented AI in some areas but are exploring further uses.
We use AI extensively, from personalised recommendations to inventory management.
We are considering AI but haven't implemented it yet.
We do not use AI and have no plans to do so.
"This is very impressive progress. However, as we’ve seen with other types of technology, integrating AI tools and APIs too quickly can result in vulnerabilities and visibility gaps. Now that most retailers have taken their initial steps with AI, it’s worth taking a moment to consider how they’re securing everything."
Martin Sanchez, Product Marketing manager, Cloudflare
How prepared is your business to respond to a potential data breach?
Very prepared – We have a comprehensive incident response plan in place.
Somewhat prepared – We have a basic response plan but need improvements.
Minimally prepared – We have some measures but no formal plan.
Not prepared – We haven’t developed any response strategies.
