The starting point
The challenge
The business had no consistent view of its devices, no regular patching process and no written policies. It needed to formalise how its IT was managed.
Cyber Essentials had become a requirement for work the firm wanted to win. The task was to put the controls in place and prepare for assessment while the construction business continued operating.
What we did
The work
Establish the managed environment
We reviewed what the firm had and put device management in place, bringing its machines under control and keeping them up to date.
Put the working arrangements in place
A hosted VPN supported remote access. We introduced written policies and moved patching onto a regular, managed footing.
Proceed to formal assessment
With the controls in place, the business went forward to formal assessment and achieved Cyber Essentials certification.
What changed
The outcome
The firm gained certification to support the security questions raised by clients and insurers, alongside day-to-day arrangements for managing its IT.
Certification achieved
The business became Cyber Essentials certified.
Eight-week engagement
The reported project ran from its starting point to certification in eight weeks.
A managed foundation
Device management, VPN connectivity, policies and patching remained part of the working environment.
The client in this record is described by sector rather than named. Why we describe our work that way.