Case Studies

Challenge

Make a subsidiary autonomous by migrating it from a group hybrid environment to a dedicated full-cloud environment, with no data loss or downtime, telephony included.

Approach

Audit & inventory, cutover planning, piloted tenant-to-tenant migration, hardening, workstation industrialisation, change management.

Solution

• Full-cloud migration of all data (mail, files, collaboration spaces)
• Cloud telephony migration
• Industrialised workstation deployment (automated provisioning)
• Cloud hardening & policies (MDM, EDR)
• Change management, IT training

Result

• Autonomous full-cloud subsidiary, zero data loss
• Controlled cutover, minimal downtime
• Serial workstation deployment, reduced provisioning time
• Strengthened security posture

Challenge

Separate a subsidiary from the group IS and rebuild an autonomous, secured IS, while meeting the IT department's ITIL requirements and securing a public cloud platform.

Approach

Controlled carve-out, secure-by-design build, non-disruptive cloud migration (lift & shift), reinforced governance.

Solution

• Carve-out & build of a new cloud collaboration infrastructure (hybrid)
• Directory & messaging migration, hardening + updated security policy
• MDM (corporate & BYOD)
• Audit & hardening of the public cloud platform (IAM, MFA, DNS)
• Firewalls + partner VPN, on-prem & cloud WAF
• ITSM (ITIL), estate patching, EDR, secure file exchange

Result

• Autonomous IS delivered, separation completed with no service interruption
• ITIL-compliant support
• Reduced exposure (WAF, filtering), managed fleets
• Secured external file exchange

Challenge

Assess and strengthen the security of an existing cloud environment, reduce the attack surface, and raise team awareness.

Approach

Configuration & vulnerability audit, briefing to management, prioritised remediation plan, support.

Solution

• Cloud configuration audit & access hardening (conditional access, MFA)
• Infrastructure vulnerability audit
• Audit report & briefing to IT and executive management, prioritised remediations
• Support to reduce the attack surface & team awareness

Result

• Clear risk mapping & prioritised roadmap
• Hardened access, reduced attack surface
• Teams trained in security best practices

Challenge

Unify and secure the management of a multi-site estate (office workstations and factory-floor stations) and industrialise deployments.

Approach

Unified management tool, standardised imaging, deployment industrialisation.

Solution

• Deployment of a unified management & security tool for workstations and servers (multi-site)
• Industrialised imaging & deployment (office workstations + factory stations)

Result

• Homogeneous, controlled estate across all sites
• Faster, repeatable deployments
• Secured, up-to-date workstations & factory stations

Challenge

Ensure, over the long term, the operation and security of a critical, multi-site IS, with annual security audits and compliance with the group security policy, while modernising to the cloud.

Approach

End-to-end ownership of infrastructure and security, governance and watch, risk-prioritised evolution projects.

Solution

• Operation & evolution of the infrastructure (network, systems, virtualisation, storage, unified comms)
• Annual security audits with certified partners, prioritised remediation
• Compliance with the group security policy, risk analyses
• Migration of critical applications to public cloud (micro-segmentation)
• Disaster recovery site

Result

• Sensitive IS kept in continuous service and under control
• Compliance with annual audits and group policy
• Cloud modernisation with no disruption

Challenge

Protect the most critical resources of a public IS against compromise of administrative access.

Approach

Tiered administration model isolating the critical core, hardening of privileged access, recognised best practices.

Solution

• Tiered administration model isolating critical resources (Tier 0)
• Hardened admin workstations (PAW), mandatory jump via bastions
• Strong authentication (MFA), rigorous privileged-account management (PAM)
• Segmentation of administration flows

Result

• Fully compartmentalised administration plan
• Sharply reduced risk of critical-access compromise
• Aligned with recognised security best practices

Challenge

Protect a mobile fleet in real time against application, network and system threats, while respecting users' privacy and data-protection rules.

Approach

Mobile Threat Defense (MTD) covering the three threat vectors, integrated with fleet management for automated remediation.

Solution

• Real-time protection across 3 vectors (apps, network, system): blocking malicious/intrusive apps, network attacks and phishing
• Device integrity & compliance checks
• Integration with fleet management (UEM/MDM): automated remediation + conditional access
• Privacy- and data-protection-compliant

Result

• Continuously protected mobile fleet (malicious apps, phishing, network attacks)
• Verified device compliance and integrity
• Preserved user privacy

Challenge

Physically migrate a server room and rebuild a reliable target IS, with guaranteed network continuity (multi-ISP).

Approach

Logistical & technical support, target platform build, redundant perimeter security.

Solution

• Server-room migration (logistical & technical support)
• Target virtualisation platform build & IS hardening
• HA NGFW firewalls with multi-ISP Internet failover

Result

• Relocation with no data loss, controlled restart
• Reliable, secured target platform
• Guaranteed Internet continuity (multi-ISP redundancy)