Download PDF

CyberArk > Case Studies > Coca-Cola Europacific Partners Steps Closer to Becoming the World’s Most Digitized Bottling Operation with CyberArk

Coca-Cola Europacific Partners Steps Closer to Becoming the World’s Most Digitized Bottling Operation with CyberArk

Technology Category

Cybersecurity & Privacy - Identity & Authentication Management
Cybersecurity & Privacy - Security Compliance
Cybersecurity & Privacy - Application Security

Applicable Functions

Business Operation
Quality Assurance

Use Cases

Cybersecurity
Regulatory Compliance Monitoring
Remote Control

Services

System Integration
Training

The Challenge

Coca-Cola Europacific Partners (CCEP) aimed to become the world’s most digitized bottler, launching multiple initiatives to increase efficiency and customer engagement. However, this digitization also brought challenges, particularly the growing risk of cyberattacks. To address these risks, CCEP's Australian, Pacific, and Indonesian operations (CCEP API) developed a three-year roadmap to enhance security measures. A critical component of this plan was improving privileged access management processes to gain better oversight and control over elevated credentials. The goal was to mitigate risks of both unintentional and malicious harm, while also reinforcing compliance with standards like PCI DSS and the NIST framework.

About The Customer

Coca-Cola Europacific Partners (CCEP) is the world’s largest independent Coca-Cola bottler, formed in May 2021 through the acquisition of Coca-Cola Amatil by Coca-Cola European Partners. The company operates in Europe and the Asia Pacific region, distributing a wide range of Coca-Cola beverages, including Diet Coke, Fanta, and Sprite, as well as various hydration and ready-to-drink coffee, tea, and juice products. With annual revenues of €13.5 billion (US$15.6 billion) and a workforce of 33,000 employees, CCEP is a major player in the beverage manufacturing industry. The company is committed to becoming the most digitized bottler globally, leveraging technology to enhance efficiency and customer engagement.

The Solution

CCEP API selected CyberArk Privileged Access Manager Self-Hosted as their solution for enhanced privileged access management. This hybrid on-premises and cloud solution utilizes Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform. The CyberArk solution integrates seamlessly with other security tools like SailPoint and Qualys, enabling comprehensive protection across multiple attack vectors. The implementation was managed by CCEP API with support from CyberArk, following best practice guidelines defined by the CyberArk Blueprint methodology. Despite the challenges posed by the COVID-19 pandemic, the solution was quickly rolled out to several hundred admin accounts and nearly 1,000 local admin accounts across the CCEP API region. The CyberArk solution provided a 360-degree view of privileged access activities, significantly reducing the risk of unauthorized access and improving compliance with standards like PCI DSS and NIST.

Operational Impact

CyberArk enabled CCEP API to build a robust defense against cyberattacks, providing a 360-degree view of privileged access activities.
The solution replaced manual, trust-based practices with rigorous, automated security processes, increasing efficiency and reducing the time and resources needed to manage privileged access.
CyberArk's ease of integration with existing technology stack components, such as SailPoint and Qualys, facilitated seamless protection across multiple attack vectors.

Quantitative Benefit