IT Risk Analysis of Walmart: Threats and Mitigation
This paper conducts an information technology risk assessment of Walmart Corporation using the NIST SP 800-30 standard risk assessment methodology. It begins with an overview of Walmart's organizational structure, industry position, financial standing, and computing infrastructure — including its Omnichannel strategy, supply chain technology, and growing use of artificial intelligence. The analysis then steps through system characterization, threat identification, vulnerability assessment, control analysis, likelihood determination, impact analysis, risk determination, and control recommendations. Key risks identified include data breaches, human error, natural disasters, AI uncertainty, and government regulation of emerging technologies. Mitigation strategies such as data encryption, ethical hacking incentives, virtual reality employee training, and AI-human workforce integration are evaluated.
- Introduction and Company Overview: Walmart's background, location, and purpose of study
- Organizational Structure and Industry Profile: Hierarchy, segments, financials, and reputation
- Computing and Network Infrastructure: Supply chain tech, AI, Omnichannel, and RFID use
- IT Risk Analysis: NIST Step-by-Step Assessment: Eight-step NIST risk methodology applied to Walmart
- Risk Determination Matrix and Control Recommendations: 3×3 risk matrix and recommended mitigation controls
- Summary and Conclusion: Synthesis of risks identified and mitigation strategies
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- Applies a recognized federal methodology (NIST SP 800-30) systematically, walking through each step in sequence and tying each stage explicitly to Walmart's real-world operations.
- Grounds abstract risk concepts in concrete examples — Hurricane Katrina, Walmart's AI robot partnerships, and documented data-breach lawsuits — making the analysis credible and readable.
- Balances breadth and depth: the paper covers nine distinct threats across multiple risk categories (natural, human, technological, regulatory) while still providing actionable mitigation recommendations for each.
Key academic technique demonstrated
The paper demonstrates framework-driven analysis: rather than discussing risks in free-form prose, the author imposes the eight-step NIST structure as a scaffold. This technique forces disciplined coverage — every risk must be characterized, assigned a likelihood rating, evaluated for security-goal impact (integrity, availability, confidentiality), and placed in a risk matrix. Students writing risk or audit papers in business or IT programs should note how adopting a published standard immediately signals academic rigor and provides a replicable structure.
Structure breakdown
The paper opens with company background sections covering identity, organizational hierarchy, industry classification, financial standing, and technology infrastructure. These sections supply the contextual information needed to make the risk analysis meaningful. The core of the paper then follows the eight NIST steps in order — system characterization, threat identification, vulnerability identification, control analysis, likelihood determination, impact analysis, risk determination (presented as a 3×3 matrix), and control recommendations. A brief conclusion synthesizes findings and restates the key mitigation strategies. References are listed in APA format.
Introduction and Company Overview
Any company that uses information technology should emphasize risk assessment for identifying threats and vulnerabilities that may adversely affect the business. In today's modern world, almost all businesses use information technology for efficiency and speed; however, they are not immune to the risks associated with its utilization. This paper identifies the IT risks facing Walmart Corporation and reports on its risk assessment for information technology. The sections that follow introduce the company, elaborate on its threats, and explain the company's strategies for mitigating those threats.
The company selected for this IT risk assessment is Walmart. Walmart started operating primarily in the United States and has since successfully expanded into international markets (Walmart, n.d.). The current number of stores operating under the Walmart brand is 11,443 across 24 countries. The company also maintains an e-commerce website to drive sales and generate profits for customers who cannot visit physical stores.
Walmart operates under a hierarchical functional management structure with two key dimensions: its vertical hierarchy and its function-based classification (Lombardo, 2019). The vertical hierarchy reflects Walmart's adherence to traditional hierarchical lines of command in a pyramid-style model. The CEO resides at the top and is responsible for delegating tasks to supervisors, who in turn delegate to lower-level employees. Those frontline workers handle daily tasks at both physical and online stores. Middle and senior-level managers are responsible for more significant decision-making.
This hierarchy allows Walmart to clarify assigned tasks so that workers can be held accountable for their duties and remain answerable to higher-tier members. Authority lines are clearly defined, and jobs are visibly delineated to distinguish segments within company management and their respective departments.
Organizational Structure and Industry Profile
Walmart operates in the wholesale and retail business, offering a wide range of merchandise and services for everyday use at low prices (CNN Business, 2021). It runs a chain of hypermarkets, superstores, discount stores, and grocery stores within the United States and in global markets. Consumer goods are merchandised under the company's name in both physical and online stores.
Walmart's operations are organized into three primary segments: Walmart US, Walmart International, and Sam's Club. Walmart US accounts for more than 65% of total sales and operates chiefly within the United States (Vault, n.d.). It also serves customers through websites and mobile apps, providing the convenience to order anything at any time. Walmart International is exposed to foreign markets across various countries, contributing approximately a quarter of total sales; the United Kingdom, China, Canada, and Australia are among the major markets. Sam's Club was created to offer memberships and relevant discounts to amplify sales volume, serving roughly 10% of total Walmart customers who also have warehouse access.
The most recent data available at the time of writing showed that net sales for Walmart in 2020 were $341 billion, representing 66% of consolidated net sales for the Walmart US segment (Walmart Annual Report, 2020). This figure grew steadily from $318 billion in 2018 and $331 billion in 2019. The increment in gross profit demonstrated consistent success, even as 2020 proved challenging due to the global pandemic. Continued consumer demand for everyday utilities, supported by Walmart's strong online presence, sustained the company's operating income throughout that period.
Walmart's standing in the industry is best understood in the context of its market share relative to competitors. As of February 2020, Amazon was the leading retailer with 39% of the e-commerce market share, while Walmart held second position with only 5.3% (Statista, 2021). Amazon's dominance reflects its expansive online presence and broader product categories. Nevertheless, certain business and market strategies have provided Walmart with additional resilience against competitors. Its brick-and-mortar approach and Omnichannel strategy — which unifies physical and online sales and streamlines merchandise movement from warehouse to end consumer — have given Walmart a durable competitive advantage (Buckley, DeFina, & Root, 2016).
Despite these strengths, Walmart has faced persistent reputational challenges. The Reputation Institute's 2015 report ranked Walmart 593rd out of 600 companies, a considerably weak position relative to competitors (The City Wire, 2015). Amazon scored 84, Publix scored 78, and Kroger scored 74. The underlying causes of Walmart's weak reputation were identified as workplace ethics, authority and control, creativity, leadership, service quality, and corporate citizenship. Employee surveys revealed that workers were not dissatisfied with the company's financial performance but rather with its culture and work environment. Top hierarchical members have continuously worked to lower turnover rates, viewing this as a meaningful indicator of company reputation beyond financial figures. The company's large scale also complicated governance processes, and integrity concerns emerged during international sales expansions, further damaging consumer perceptions.
Computing and Network Infrastructure
Although Amazon has achieved considerable success in product categories and process management within its supply chain, Walmart outpaces Amazon in global sales — Amazon's global sales being roughly half of what Walmart generates (Skubana, 2020). Operating in numerous countries, managing an enormous number of stores, and employing millions of workers for both online and physical sales requires a technology infrastructure capable of handling sales processes every minute around the world.
Walmart's supply chain has long been powered by collaboration and technology. The first use of point-of-sale (POS) software on a computer system dates to 1975 (Skubana, 2020). Barcodes are used to scan products and feed data into a large database for inventory management. A retail link system was subsequently launched with expert assistance to enable real-time sales forecasting, making inventory management more convenient and timely.
Websites and mobile apps are central to modern retail, and Walmart has embedded technology throughout its order and fulfillment processes. The supply chain became smoother when employees were equipped with technology for order-taking from apps and inventory handling. From the customer side, orders are placed daily across multiple countries, with employees playing an integral role in restocking, sales-trend forecasting, real-time data preparation, customer query resolution, and feedback analysis.
As technology improved inventory management, warehouse operations were also transformed. Tasks that once took hours are now handled through computer-based order processing. The tracking of inventory with RFID technology, combined with greater employee autonomy to make real-time trade decisions, introduced an innovative approach to warehouse management.
Walmart's Omnichannel inventory management and logistics represent essential and inseparable components of its infrastructure. The company's retail network requires it to operate professionally in both brick-and-mortar and online formats simultaneously. This has allowed Walmart to position itself uniquely within the retail market at a time when other large retailers still struggle to master Omnichannel execution. The Omnichannel e-commerce headquarters are based in Silicon Valley to control big data operations, and extensive annual investment is made to maintain this as a robust global platform.
Always verify citation format against your institution’s current style guide requirements.