Hire company
Case Study
The hire company engaged CyberGuru to perform an assessment of their IT systems. They were concerned they had sensitive data and were unsure of its location. This is an anonymous case study due to the sensitive nature of the engagement.
THE CHALLENGE
Our analysis revealed the company had data spread across several different systems: Google for email, Microsoft 365 for the Office apps as well as Dropbox and a server for data storage.
This presented a number of issues:
- These systems had not been set up securely.
- None of this data was properly backed up, leaving the company vulnerable.
- Having the data spread across multiple systems resulted in high software costs.
- With the data fragmented in this way it was impossible to determine where all the sensitive data was located.
THE SOLUTION
To address these issues we:
- Set up Microsoft 365 securely and migrated all data into a single secure location.
- Set up a third-party data protection solution for Microsoft 365.
- Ran a personally identifiable information (PII) scan across their Microsoft 365 environment to identify sensitive information.
Chris from CyberGuru noted that, “Consolidating their email and data in Microsoft 365 was a clear choice because it provided better oversight of their information, cut down on their hardware and software costs, and improved their ability to safeguard data.”
The personally identifiable information (PII) scan identified 50 000 pieces of sensitive information including driver licences and other identification documents as well as financial information. The scan helped the company to understand the size of their data collection issue. We also worked with the labour hire company to:
- Change their data collection processes to minimise PII collected and ensure PII is stored securely.
- Take a big step in becoming compliant with the Notifiable Data Breach Scheme.
THE RESULTS
The hire company has experienced the following benefits of this work:
- Experienced better productivity and security with fewer issues from having the email and data consolidated.
- Email and data now backed up securely.
- Reduce their software costs each month by 53%.
- PII has been identified, quarantined, and where appropriated deleted from their system to minimise their risk.
- Meet the technical requirements of the Notifiable Data Breach Scheme.
Scope: IT Assessment, Microsoft 365 Migration, Strategic Advice, Data Security, Co-Managed IT Services
Businesses today face increasing challenges in managing data due to the sheer volume and different types of data they collect. By helping this company determine the size and scope of their data management issues, we enabled them to be more strategic and efficient moving forward.
Chris Jeffery
Chief Guru
CyberGuru