As the shopping experience becomes increasingly digital, information security is fast becoming a critical success factor in the retail sector. Migros’s success here depends in part on identifying digital risks ahead of time, assessing them accurately and dealing with them for the long term.

What was needed was a smart, targeted GRC framework that is fit for the future and can steer, support and audit the independent business units comprising around 100,000 employees. 

Migros turned to Zühlke as its trusted advisor, who is supporting in structuring and drafting the framework. Tactical instructions and guidelines, as well as operating standards and recommendations – based on existing strategic guiding principles – are being developed, signed off and implemented.

Zühlke is taking care of the design and implementation of the centrally managed and decentrally operated control management system. This ensures group-wide standardised recording, monitoring and continuous optimisation of controls.

In close collaboration, we are building a consistent, agile framework that is precisely tailored to Migros’s needs – harnessing synergies, reducing operating costs and keeping pace with digitalisation. It will protect Migros effectively against digital risks while providing a secure shopping experience for customers.