Proven Cybersecurity and IT Leadership

Challenge

The organisation needed to establish effective technical controls and repeatable security processes capable of meeting several demanding certification standards.

Solution

Implemented and improved the technical controls, governance processes, policies and supporting evidence required to achieve and maintain recognised and mandatory security certifications.

Outcome

The organisation attained and retained ISO 27001, Cyber Essentials Plus and PCI DSS, strengthening customer assurance and highlighting a sustained commitment to information security.

Challenge

Employees remained vulnerable to phishing and other forms of social engineering. This created a significant risk and a proven route into the organisation for attackers.

Solution

A structured awareness programme of phishing campaigns, tailored e-learning, improved induction training, drop-in surgeries, regular comms and an incentive scheme.

Outcome

Employee awareness of social engineering increased by 35%. The organisation’s phishing susceptibility rate fell from 26% to just 2%, promoting a stronger cyber hygiene culture.

Challenge

The environment faced increased identity and device risks and required stronger configuration, identity protection and privileged-access controls.

Solution

Implemented MFA, Windows Hello, geolocation restrictions, Conditional Access policies, PIM and segregated administrator accounts.

Outcome

Microsoft Secure Score increased from 49% to 80%.  Access to critical systems now under much stronger control thus reducing blast radius of a future attack.

 Challenge

A business-critical CRM platform was generating a high volume of Service Desk tickets leading to disrupted users and the consumption of valuable IT support capacity.

Solution

Migrated the core architecture into Microsoft Azure and removed single points of failure to address the underlying causes of application instability.

Outcome

Service Desk tickets relating to the CRM platform were reduced by 30%, improving reliability, employee experience and IT team capacity.