CASE STUDIES

PAC 2000A CONAD chooses Cyber Guru for cybersecurity training

Overview

PAC 2000A CONAD is the largest cooperative in the Conad Consortium in terms of size and turnover. It operates in five regions – Umbria, Lazio, Campania, Calabria, and Sicily – and is currently the leading Large-Scale Retail operator in Central-Southern Italy. The figures outline its scale: a turnover of 5.6 billion euros, net assets of approximately 1 billion, a market share of 20.33%, and 1,550 points of sale.

The challenge

With a large, distributed structure and a diverse workforce, PAC 2000A Conad quickly recognized the need to strengthen the cybersecurity culture across the entire organization to address growing digital threats and regulatory obligations, such as the NIS2 directive. Training large groups of employees on secure behaviors has become essential to reducing cyber risks and protecting the company.

The solution

PAC 2000A Conad involved 1,050 employees in various Cyber Guru training paths, achieving over 80% participation and a significant reduction in clicks during phishing simulations as early as the first year. The project strengthened cybersecurity awareness throughout the organization, involving both staff and managers, with a dedicated path for the Board focused on the NIS2 Directive.

Over 1,000 employees involved in a practical digital awareness path to strengthen corporate culture, promote safer and more efficient digital behaviors, and increase the ability to manage cyber risks within the leading Conad cooperative in Central-Southern Italy

At the heart of PAC2000A CONAD is a cooperative model based on mutuality, participation, local roots, and the centrality of people. “PAC2000A is one of the five cooperatives belonging to the Conad National Consortium,” explains Vanni Chioccoloni, Chief Information Officer of the PAC2000A CONAD Group. “Each cooperative manages the development of the associated sales network in its areas of competence and provides products and services to points of sale managed by independent entrepreneurs.”

PAC2000A generates a very significant employment impact in the territories where it operates under the Conad brands, employing over 30,000 people and maintaining relationships with approximately 1,100 Italian supplier companies.

It is in this complex and highly articulated context that the cybersecurity training program, launched in 2023, takes shape. “From the beginning we realized that IT security is not just a technological issue,” says Chioccoloni.

The project involved a large and diverse population: managers, office and logistics site employees, distributed across all five regions. “We involved all the Group companies,” Chioccoloni specifies. “To date, approximately 1,050 internal resources have been engaged in the training program. A significant number that required attention to differences in role, operational context and familiarity with digital technology, but which also gave us a very clear picture of the organization’s maturity.”

An organizational challenge before a technological one

A team effort that saw the direct involvement of Erica Zanobetti, Head of Training – Skills Development at PAC2000A CONAD. “The project was built in a truly collaborative way,” she explains. “Our CIO had recognized the need to implement an effective strategy even before the NIS2 directive came into force, which imposed strict cybersecurity obligations on the retail sector. When the time was right, the existing collaboration between Information Systems and Skills Development allowed us to be fast and effective in launching the project.” After an evaluation phase, the choice fell on Cyber Guru, which provides a highly engaging product.

The consulting support from Cyber-Bee, a Cyber Guru partner, was decisive in helping PAC 2000A Conad identify the platform best suited to its organizational goals and operational context. “We supported PAC 2000A Conad with enthusiasm, creating a tailored path for them where Cyber Guru proved to be the ideal solution for aligning cybersecurity training with the objectives of the NIS2 directive. The results were excellent, demonstrating that targeted consulting, combined with an appropriate product, can transform compliance into a security culture—which is what truly makes a difference for companies.” – Luca Gabrielli, CEO of Cyber-Bee

“The result at the end of the first academic year,” explains Zanobetti, “was a completion rate exceeding 80%, accompanied by a significant reduction in clicks during phishing simulations. The final survey offered to all participants was also important in confirming the value of the path,” Zanobetti continues: “Many perceived this training as useful not only for the company but also for their personal lives.” “In the second year, the project expanded with a dedicated program for the boards of Group companies, focused on the NIS2 Directive and corporate governance responsibilities.

To read the full interview and learn more click here