Agile and  Modern IT Solutions

Our client is undergoing a comprehensive infrastructure modernisation initiative to implement a cutting-edge security framework aligned with Zero Trust principles. By leveraging our expertise, the client is strategically aligning with the NIST Zero Trust maturity model, selecting top-tier products for seamless integration to fulfil the specific capability needs of each maturity model pillar. This strategic approach is poised to establish a state-of-the-art data centre and infrastructure fortified by robust zero-trust security protocols.

To address the needs of the users and device pillars, we strategically utilised key Microsoft technologies, including Microsoft Entra (Azure AD) for robust identity management and Microsoft InTune for efficient device management. Our approach also involved leveraging tools such as Gitlab, Microsoft Purview, and TrendMicro to enhance data and application management while ensuring top-notch security measures. Considering the client's substantial on-premises network infrastructure with a mix of cloud services, we integrated VMware NSX-T to implement effective east-west micro-segmentation. This decision enhances network security and optimizes overall network performance. Moreover, we meticulously configured a suite of cutting-edge tools to fulfil the Automation Orchestration pillar requirements, including Microsoft Sentinel, Ansible, Elastic, Gigamon, and Microsoft Defender. This comprehensive setup ensures seamless automation and orchestration and enhanced visibility and analytics across the network infrastructure.

An industry trailblazer in automated healthcare solutions aimed to boost collaboration and optimise project management by incorporating various Atlassian products into their operations. Nevertheless, navigating the complexities of selecting the most suitable licensing model and achieving seamless integration presented formidable hurdles for the organisation.

Our team initiated an exhaustive analysis to pinpoint the exact licensing specifications aligned with the client's enterprise requirements. We meticulously charted a strategic integration roadmap by orchestrating meetings with Atlassian and engaging in discussions with key stakeholders. Through close collaboration with Atlassian, we seamlessly executed the deployment of enterprise licensing or consolidated Atlassian products within a unified organisational framework tailored to the agreed-upon strategy. Furthermore, we dedicated efforts to ensure seamless compatibility between the client's existing user emails and Okta, a critical element of their IT infrastructure. This endeavour involved liaising with Atlassian support to update user emails and establish well-defined user groups for streamlined access management protocols.

The client faced challenges in managing a high volume of security alerts (976+) across a mixed environment of 146 endpoints. Their infrastructure included a combination of Windows workstations, servers, VMware hosts, Office 365, and security tools like CrowdStrike EDR and Cisco Umbrella. Despite leveraging Arctic Wolf services for monitoring and alerting, they struggled to contextualize and prioritize alerts, evaluate risks, and efficiently remediate vulnerabilities. Additionally, undefined hardware details, complex configurations, and dependency risks added complexity to the remediation process.

Our team provided managed security services tailored to the client’s needs. We reviewed security alerts daily and conducted weekly sessions to contextualize findings, aligning priorities with their business requirements rather than generic industry standards. We assisted with risk assessment, provided pros and cons for mitigation options, and offered recommendations for configuration changes. By developing customized remediation plans and runbooks, we empowered the client to handle common issues effectively. Proactive measures included ensuring alignment with best practices, such as enabling MFA for AnyConnect users and addressing complex firmware risks.