Managed IT and security transformation for a financial services organisation
An independent security review found serious weaknesses across a UK financial services organisation’s IT estate, and real doubts about the managed IT provider it was paying to protect it.
We moved the whole service across to InfraTech in a single weekend, with zero downtime, then worked through a prioritised security and remediation programme to leave a secure, proactively managed environment.
- Financial services
- Managed IT
- Cyber security
- Microsoft 365
A security review that exposed the gaps
A UK financial services organisation came to us after an independent security review uncovered significant vulnerabilities and weaknesses across its IT environment. The findings raised serious concerns about its existing managed IT provider and the level of protection being delivered.
The review found unpatched systems missing critical security updates, multi-factor authentication not consistently enforced and shared user accounts in use, gaps in Microsoft 365 configuration and security policy, limited oversight of endpoint devices, and too little proactive management to stop risks building up.
With sensitive financial and customer information to protect, the risks had to be dealt with quickly, without interrupting the business. The organisation needed more than a new support provider: it needed a partner who could stabilise the environment and run it properly from then on.
A weekend switch, then security at the forefront
We built a prioritised recovery and improvement plan: an accelerated move onto our managed IT service, followed by a programme of security remediation and operational improvements. The initial transition was completed over a single weekend, with no downtime or disruption to the business. Five areas of work followed.
- 01
Assess
A detailed assessment of the IT estate, with every configuration weakness, vulnerability and management gap documented and prioritised by severity and business impact. - 02
Switch
A carefully planned transfer from the incumbent provider in a single weekend, with our RMM platform across every device and a new Microsoft 365 backup of Exchange Online, SharePoint and Teams. - 03
Harden
MFA enforced, shared accounts dealt with, identity and access management strengthened and Microsoft Entra Conditional Access introduced, in line with Microsoft best practice. - 04
Patch
Devices brought up to the required security and patching standards, upgraded where that extended their life and replaced where they were no longer fit for purpose, with Intune app protection on mobile. - 05
Sustain
Ongoing monitoring and patch management, regularly tested Microsoft 365 backups and tested business continuity arrangements, built into the managed service rather than treated as a one-off.
From a vulnerable estate to a secure, proactively managed service
Within weeks of taking over the service, we had dealt with the most significant security weaknesses and put a robust foundation in place for ongoing IT management. The organisation came away with:
- Zero-downtime transition. The entire managed IT service moved across over a single weekend, without interrupting operations or productivity.
- Stronger cyber security. MFA enforced, Conditional Access in place and identity management strengthened, significantly reducing exposure to unauthorised access.
- A higher Microsoft Secure Score. Significantly above the average for comparable organisations, a measurable sign of the improvement.
- Fully patched, managed devices. Endpoints under proactive management, outstanding updates applied, and devices upgraded or replaced where they fell short.
- Protected corporate data. Mobile app protection policies safeguarding business information on both corporate and personally owned devices.
- Reliable backup and recovery. Comprehensive Microsoft 365 backups, with regular restoration testing.
- Better business resilience. Business continuity arrangements implemented and tested.
- Proactive, accountable IT management. A structured managed service with ongoing monitoring, maintenance, security oversight and continuous improvement, in place of an inconsistent, reactive support model.
The work went beyond fixing the original findings. The organisation now has a stable, secure and professionally managed IT environment, and its leadership team can focus on running the business with confidence in its technology. It also showed that an organisation facing significant security challenges can move to a new managed service provider quickly and safely, without compromising business continuity.
Capabilities
- Managed IT services
- Cyber security and risk management
- Microsoft 365 security
- Endpoint management
- Business continuity and disaster recovery
- Microsoft Entra ID and Conditional Access
- Microsoft Intune
- Microsoft Defender
- Acronis cloud backup
- Remote monitoring and management
Other work we can talk you through
Each one is a conversation we are happy to have in more detail.
AI advisory for a healthcare technology organisation
The economics of AI, understood before committing to large-scale delivery.Read the case studyLower costs and stronger security for a charity
Monthly costs down 75%, and a Microsoft Secure Score taken from 45% to over 80% within weeks.Read the case study1,300 staff working from home, in a matter of days
A financial services organisation kept fully operational through the move to home working.Read the case study
Concerned about your IT security, or your current provider?
Whether you are responding to a security assessment, worried about gaps in your current IT support, or just want a more proactive partner, we can help. One conversation, no obligation.
Related: Managed IT services to run it all, and cyber security to keep it protected.
