From a risk and compliance perspective, defense, finance, tech, and healthcare are generally thought of as the “riskiest” industries — but the retail sector is more vulnerable than it might appear.