Global Retailer Moves to Zero Trust
Client
Mercato Group
Category
Identity & Access
Date
Timeline
9 months
8,000
Employees moved to per-app access
20
Countries in the rollout
100%
Of staff on phishing-resistant MFA
1
Legacy VPN fully retired
Industry
Retail
Services Used
Zero Trust Access
Managed SOC & MDR
Mercato Group’s legacy VPN gave 8,000 employees broad access to internal systems across 20 countries. Once connected, a single stolen password could reach far more than its owner ever needed.
The company wanted to remove that risk without interrupting trading in stores, warehouses or head offices, including during the critical peak season.
Identity foundation
We consolidated sign-in behind one identity platform and rolled out phishing-resistant MFA in regional waves. Local champions and clear communications kept support requests manageable throughout.
Application migration
Applications moved one group at a time from network access to per-app policies that checked identity and device health. Trading-critical systems were scheduled around peak periods, with a tested fallback for every change.
Results
All 8,000 employees now work through per-app access, and the VPN has been retired. Compromised credentials can no longer open the wider network, while every access decision is logged for monitoring and audit.
Our people got a simpler sign-in and we got far tighter control. It is rare for a security project to deliver both.
Isabel Moreau
Head of Infrastructure, Mercato Group
Related Projects
Recommended Projects
Infrastructure
Energy Provider Secures Critical Infrastructure
Network segmentation and OT monitoring protected power distribution systems from remote attacks.
Compliance
SaaS Startup Achieves SOC 2 in 90 Days
A fast-growing SaaS company went from no formal program to a clean SOC 2 Type I report in three months.
