Skip to main content
IG-Smart — Governance, Risk & Assurance
The Co-operative Group

The Co-operative Group

Routine penetration testing for a major national retailer and co-operative

Strongest proof

Preferred supplier relationship · 2+ years

Sector
Retail / Consumer
Capability
Cyber Governance & Assurance
Geography
United Kingdom
Engagement model
Retained / managed service
Period
Two years+
Evidence
Named client · Public evidence

At a glance

Who
The Co-operative Group · Retail / Consumer
Why it mattered
A major national organisation needed consistent, routine testing that kept pace with its changing digital estate.
IG-Smart's role
Routine penetration testing

01The exposure

The Co-operative Group is a major UK organisation with extensive digital operations and customer touchpoints.

A changing digital estate needs continuing, consistent testing rather than one-off assessments.

02The mandate

Routine penetration testing that evolves with the Group's digital footprint and informs risk prioritisation.

Commissioned scope

  • Routine penetration testing

03Environment

Organisation context

Describes the client organisation — not the size of IG-Smart's work.

  • Major UK retailer and co-operative

04IG-Smart's approach

  1. 01

    Routine testing rhythm

    Provides regular testing aligned with changes to the Group's digital estate.

  2. 02

    Evidence for prioritisation

    Routine testing produces evidence that can support risk prioritisation and infrastructure-hardening decisions.

05Engagement scale

What IG-Smart's work covered

  • Routine penetration testing

06What we delivered

  • Penetration test reports and findings

07Outcome

Relationship proof

On the Group's preferred supplier list, with a relationship of more than two years.

08What this demonstrates

Relevant to large organisations that require repeat technical security assurance from a supplier capable of building contextual understanding through repeated testing over time.

09What buyers can verify

Public

  • Named client
  • Engagement scope
  • Published engagement duration
  • Deliverable types described

Further evidence can be discussed subject to confidentiality and client permissions.

Related services

Facing a comparable requirement?

This case reference is passed to the form so you don't need to re-enter it.

Submit a Requirement