Marks and Spencer is a major global brand, one which is quintessentially British with a global reach.

← Back to Blog

Marks and Spencer is a major global brand, one which is quintessentially British with a global reach. Whose brand is its primary asset and says everything about quality, style, solidity, and trust. Yet you do not put the most important capability to protect that in today’s digitally dependent age, which is cybersecurity, under IT or Operations. Cyber reports to the CEO at best, or through the General Council at worst.

The Chairman is quoted as saying, We came out of the year-end with a bit of a spring in our step and of course, in business life events have a way of tripping you up and putting you on your backside again.” Well, cyber attacks will do that to you when you’re dependent upon digital. Cyber attacks tend to give you a very bad day, week, quarter, or worst. Something the M&S board was aware of.

Following on, the company has put IT under the Operations director. Just when the rest of the world is coming to terms with cyber needing a seat at the board table. At least it can’t be said that the British company is not moving away from its chocolate box, Cotswold Thatched Cottage persona, and sticking with tradition and convention.

One can only hope that M&S can find a CIO with a digital background who has steered a significant retail brand through digital transformation.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Bryan Foss

Veritas GRC

#cybersecurity #cyberattack

https://lnkd.in/eDprMDPi

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7372174608218656768

Categories

Cybersecurity, Governance & ESG

Tags