OVERVIEW
Protecting an organisation that works with people at risk
A UK-based non-profit organisation in the education and human rights sector supports academic people who are facing danger, persecution, discrimination, or violence in their home countries.
Because of the sensitive nature of its work, the organisation needed to ensure its IT environment had strong baseline security controls in place. Cyber Essentials readiness became a priority to help demonstrate that the organisation was managing key cyber risks appropriately.
CHALLENGE
A practical and cost-effective route to Cyber Essentials
The main challenge was helping the charity become Cyber Essentials ready in a practical and cost-effective way. Before the work began, several security gaps needed to be addressed and the wider IT security controls required review, including Microsoft 365 access, MFA, password policies, backups, domain security, endpoint protection, and user awareness.
Excessive privileges
Standard users had local administrator access, which raised the risk of accidental changes and malware exposure.
Security gaps
Operating systems required updates, and device, application and policy management all needed to be improved.
Certification readiness
Controls needed to align with Cyber Essentials requirements in a way that suited a small, 25-user organisation.
For a small non-profit, the solution had to be proportionate, manageable and aligned with Cyber Essentials without unnecessary complexity.
SOLUTION
What the solution included
Lucidica supported the organisation through Cyber Essentials readiness work using its Security Ultimate package. This was the most suitable option because the client wanted to improve overall IT security compliance while also working towards Cyber Essentials.
The work focused on identifying missing controls, improving existing protections, and adding tools where required.
OUTCOME
Cyber Essentials certification achieved successfully
The organisation achieved certification without issue, following the readiness work and assessment completed by Lucidica’s in-house assessor.
24
users and devices secured
6
key areas of cyber risk reduced
0
issues raised at assessment
Overall cyber risk was significantly reduced across several areas:
Need help becoming Cyber Essentials certified?
Complete the form below, and we’ll reach out to schedule your free 30-minute consultation. During this call, we’ll get to know your business needs and explore how we can help. We’re committed to responding to all enquiries within one business day.
CONCLUSION
A more secure, compliant and manageable IT setup
Overall, the organisation moved from a higher-risk environment to a more secure, compliant, and manageable IT setup suitable for a 25-user non-profit.
For more information about Lucidica IT Support’s services and how we can assist your business, please contact us. Our portfolio of solutions extends beyond non-profit organisations, as we aim to empower businesses with reliable technology foundations.
