Case Study – Security Monitoring and Conditional Access for a remotely deployed workforce

Overview

Cloudworks were recently engaged to develop and increase the security of the IT environment for a local firm of accountants. This work followed a successful deployment of a Modern Workplace across the organisation using Microsoft 365.

The key requirement from a discovery workshop session was to provide a consistent and straightforward user experience and peace of mind when it comes to data, device, and identity security.

The Solution

The first phase involved creating and deploying custom compliancy policies for all Windows and mobile devices using Microsoft Endpoint Protection. Rules were configured that devices must meet to be considered compliant such as minimum OS version and security updates. If a device isn’t compliant, access to data and resources are blocked using bespoke Conditional Access policies.

Custom configuration profiles were then created for day-to-day staff and company directors. This allowed for different access levels and security rights dependent on their role in the business.

With a remotely deployed workforce, Cloudworks recommended that BitLocker was deployed and enforced for all users. BitLocker is used to safeguard against someone gaining physical access to drives containing customer data by encrypting the drives. This eliminates the potential for data theft or exposure because of lost, stolen, or inappropriately decommissioned computers and drives.

The final step was to setup security monitoring across the whole IT infrastructure.  This allowed Cloudworks to proactively monitor risky sign-in events such as impossible travel to atypical locations, anonymous IP addresses, unfamiliar sign-in properties, malware linked IP addresses, leaked credentials, password spray and Azure AD threat intelligence to identified known attack patterns.

 

The benefits

With less time managing and monitoring risk factors within the business, significant cost savings were made. The key stakeholders within the business were immediately reassured and confident that security risk factors were significantly reduced along with a comprehensive proactive monitoring service across the IT estate.

 

In addition, the business now has full visibility into the IT security status with monthly reports. These give an immediate overview and detailed insights into areas such as malware detections, device compliance, phishing attempts and secure score ratings.

If you are concerned about security for your business and employees working remotely then give Cloudworks a call. We are specialists in cloud technologies, cyber-security and IT support. In addition, we continuously monitor our clients IT cloud infrastructure to ensure they are secure and protected against the latest threats. Give us a call to find out more and we will find the best strategy and solution to fit your business.

Call Cloudworks on 0115 824 8244 or email info@cloudworks.co.uk