Case Study
Sector
Employees
Services
Central Co-op is the largest independent society in the United Kingdom with over 250 Retail stores, 20 petrol stations, 150 funeral homes sites, with a crematorium, coffin factory and masonry. It has over 8,000 employees and covers a huge geographical area from Barnsley to Milton Keynes, and from Great Yarmouth to the West Shropshire Border.
Three strategic imperatives lie at the heart of the Society’s Information Security objectives:
Media reporting of emerging threats and of impact to industry peers led to increasing awareness of the need to strengthen the Society’s security posture.
David Charlton, the Society’s Information Security Manager, recalls there was a lack of cyber security maturity at the time. “From a security perspective we weren’t in a good place. No one was responsible for cyber security. We were at the start of our journey and we lacked the resource and expertise to move forward.”
A long-established business, there was a reliance on legacy systems, processes and controls, and it was recognised that a 24/7 SOC was needed to provide the resources for monitoring and detection, as well as the skills to be able to respond quickly in the event of a serious incident.
“From a security perspective we weren’t in a good place. No one was responsible for cyber security. We were at the start of our journey and we lacked the resource and expertise to move forward.”
David Charlton
Information Security Manager, Central Co-operative
The Solution
Updated security tooling
Modernised detection stack replacing legacy monitoring gaps.
24/7/365 detection & response
Alert fatigue, skills gaps and competing priorities limit the time available for tuning, investigation and response. Even capable teams can struggle to maintain continuous coverage without additional headcount.
Exposure & risk management
Powerful detection platforms are often underconfigured or disconnected from existing workflows. Custom integrations, event feeds, automation and reporting remain unused – limiting visibility and return on investment.
Incident planning & simulation
Regular cyber incident exercises to test and refine response readiness.
A named security consultant
Strategic oversight and ongoing development of the cyber roadmap.
A partner, not a vendor
Close engagement functioning as an extension of the in-house team.
Longwall’s Managed Service has brought comprehensive visibility of threats and exposures around the clock, to enable accurate prioritisation of resource and investment. The Society’s in-house team has gained in expertise and confidence and, extended by Longwall, now has the capacity and bandwidth to plan future cyber developments, including Cloud-First.
With Longwall, Central Co-op has achieved strong operational resilience and substantially reduced risk of business disruption or data loss. This has been reflected in a reduction of over 50% in the Society’s Cyber Liability Insurance premium, and a 70% reduction in the policy excess.
“Above all, Longwall delivers peace of mind. Our cyber security posture has matured significantly: we have reduced risks, improved our operational effectiveness, and we are able to show value to the Board.”
David Charlton
Information Security Manager, Central Co-operative
Talk to our team about building a 24/7 managed security service around your organisation.
