Home · Work

Case studies

Representative engagements.

These studies describe the pattern of the work. Names and identifying details are withheld. They are not a promise that every environment ends the same way.

Planning session with laptops and a marked diagram

Legal practice

Files had outgrown the office.

A regional practice kept matter files on a shared drive, in personal mailboxes, and on laptops that left the building. Wi-Fi covered the lobby as well as the conference rooms. The firewall configuration had not been reviewed against who still worked there.

  • Mapped where client documents actually lived.
  • Rebuilt access by matter team instead of a shared login.
  • Segmented guest wireless from the file network.
  • Set encrypted laptops and a tested nightly backup.
Padlock on a keyboard

Outpatient group

Access became a decision, not a habit.

Front-desk and clinical staff shared a handful of logins because it was faster on a busy morning. Backups existed, but nobody had restored a record. The group needed HIPAA-minded safeguards without adding a queue at check-in.

  • Individual accounts with multi-factor authentication on the record system.
  • Automatic screen lock and device encryption.
  • A restore test of a single day’s schedule and notes.
  • A one-page incident card at each desk.
Colleagues reviewing work on laptops

Microsoft 365

The inbox was the real perimeter.

A professional firm had moved mail and files to Microsoft 365 and assumed the move was the security project. Forwarding rules, open sharing links, and a missing domain authentication record were doing more harm than the office network.

  • Blocked legacy sign-in and required multi-factor authentication.
  • Published mail authentication so invoices were harder to spoof.
  • Closed anonymous sharing and reviewed external links.
  • Turned on alerting for unusual mailbox rules.
Patched network switch

Multi-site operator

Three locations, one protection model.

Each site had grown its own router, its own Wi-Fi password on a sticky note, and its own idea of backup. Leadership wanted one standard that a new site could inherit.

  • Standard firewall and wireless design, guest traffic isolated.
  • Central view of protected endpoints.
  • Shared data classified once and synced under the same access rules.
  • A site-opening checklist so the fourth location would not start from zero.

Your environment will not match these exactly.

That is the point of the briefing: we start from your files and your constraints.

Request received