Background
As the company began selling to larger organisations, buyers started asking for SOC 2 and ISO compliance. Its existing security setup could not provide the controls or the audit trail they expected.
The challenge
- Basic password policies left user accounts exposed to phishing
- Laptops used by remote employees were unmanaged and not backed up
- The lack of an audit trail was holding up enterprise sales
Our solution
We implemented a Zero Trust approach using Microsoft 365 and Azure security services.
- Microsoft Entra ID (Azure AD) with Conditional Access and multi-factor authentication for every user
- Automated endpoint backup for more than 500 devices
- Reporting configured to support SOC 2 audit requirements
The outcome
The company now has the access controls and audit trail that enterprise customers ask for during security reviews, which has helped it close larger deals.
