Build a clear asset picture
Devices and users accessing company systems were identified and existing records were updated to create a more reliable inventory.
Older equipment no longer in use could then be removed from the active environment.
Intouch Tech helped standardise the environment, address key gaps and prepare the business successfully for Cyber Essentials certification.
Service
Cyber Essentials certification and remediation
Industry
Construction and Property Services
Environment
Microsoft 365, Windows laptops, tablets, mobile workers and multiple project sites
Organisation size
Approximately 80 employees
Key focus
Device management, security updates, user access, secure configuration and certification readiness
The business had grown steadily through new contracts and project wins, adding employees and devices as required.
Over time, that created an inconsistent IT environment. Laptops and tablets had been introduced at different stages, software versions varied across the estate and some users still held administrator permissions they no longer needed.
Employees also moved regularly between the office, client locations and active construction sites, making it harder to maintain a clear view of every device connecting to company systems.
Cyber Essentials provided an opportunity to standardise those controls without disrupting teams that relied on their devices every day.
Intouch Tech reviewed the company’s environment against the Cyber Essentials requirements and created a clear remediation plan.
Devices and users accessing company systems were identified and existing records were updated to create a more reliable inventory.
Older equipment no longer in use could then be removed from the active environment.
In-scope devices were checked for supported operating systems, security updates and unnecessary applications.
Outstanding updates were applied, unsupported software was addressed and device configurations were brought onto a more consistent baseline.
User accounts and administrator privileges were reviewed across the business.
Unnecessary elevated access was removed, while former employee accounts and outdated permissions were also addressed.
Intouch introduced a more consistent approach to patching and software updates, reducing reliance on individual users to keep devices current.
Once remediation was complete, Intouch supported the company through the Cyber Essentials assessment and submission process.
Every device included within the assessment was checked against the required security baseline.
Outdated devices and software identified during the review were updated, replaced or removed from scope.
Elevated permissions were reduced where they were no longer required.
The business successfully completed certification with a more consistent and manageable IT environment.
Cyber Essentials gave the company a clearer standard for introducing new users, devices and software as the business continued to grow.
With better visibility of its technology estate and more consistent controls around permissions, updates and configuration, the organisation was better positioned to maintain security across future projects and locations.
The certification also gave the business a recognised way to demonstrate its cyber security approach during tenders, client questionnaires and supplier due-diligence reviews.
The CHALLENGE
The solution
The results
Ongoing IMpact
Cyber Essentials gave the company a clearer standard for introducing new users, devices and software as the business continued to grow. With better visibility of its technology estate and more consistent controls around permissions, updates and configuration, the organisation was better positioned to maintain security across future projects and locations. The certification also gave the business a recognised way to demonstrate its cyber security approach during tenders, client questionnaires and supplier due-diligence reviews.
Mon-Fri 8am-5pm · 24/7 for managed clients
Response within 1 business day, guaranteed
UK-based team, since 2012