As ISO 27001 certification is the gold standard internationally for information security management and GDPR compliance, it takes time, investment and collaboration with domain experts to achieve it.<\/p>\n
\u201cISO 27001 is the certification road you go on,\u201d explains Stephen Quinn, ICT specialist at Crowleys DFK. \u201cThe starting point is device safety, and mobile device and application management.\u201d<\/p>\n
This is the road you go on. The starting point is device safety, and mobile device and application management.<\/p><\/blockquote>\n
For Crowleys DFK, the natural choice to handle these business-critical concerns was to work with Microsoft Gold Security Partner & MISA member, CWSI, to implement Microsoft Intune, which is part of Microsoft Endpoint Manager. \u201cWe\u2019re a Microsoft house, so it made sense for us to leverage those tools. For example, we rolled out Teams, which was a big change for an accountancy organisation.\u201d<\/p>\n
<\/p>\n
Trust vital to clients<\/strong><\/h2>\n
As the firm provides vital tax, audit, financial advisory and business consulting services to both public and private sector clients, a high level of trust is crucial for its client relationships. Clients who share confidential information need to be completely confident that Crowleys DFK can safeguard it.<\/p>\n
\u201cIt\u2019s really important for us to enable that collaborative work environment securely,\u201d says Stephen. \u201cWe don\u2019t have any appetite for risk. Security must be the primary focus of everything we do.\u201d<\/p>\n
\u201cClients trust us when they give us access to their data. We must carry out due diligence on any tools we use to allow us to work securely and in a remote environment.\u201d<\/p>\n
With Intune in place, Crowleys DFK could secure devices and manage applications so that its employees could access confidential information on their mobile devices. \u201cWe gained a \u2018single pane of glass view\u2019 and a zero trust environment, really giving us the enhanced visibility and security we needed,\u201d adds Stephen.<\/p>\n
<\/p>\n
Enabling a successful partner collaboration<\/strong><\/h2>\n
To ensure its Intune rollout was finely calibrated for both its security and remote working needs, Crowleys DFK required an expert partner and chose to work with Gold Microsoft Security Partners and security experts, CWSI.<\/p>\n
\u201cThey were our preferred option as they have the expertise and the knowledge in this area,\u201d says Stephen.<\/p>\n
CWSI already has ISO 27001 certification. Knowing it had achieved this benchmark was reassuring in itself to Crowleys DFK, as was the knowledge it could work collaboratively with CWSI.<\/p>\n
Crowleys DFK and CWSI worked together to develop a roadmap for a three-phase project, with the Intune implementation as phase 1. It also enabled the firm to unlock other possibilities involving cloud and SaaS applications as it sought to move away from the on-premise environment.<\/p>\n
<\/p>\n
Reliable consistent and improved efficiency <\/strong><\/h2>\n
An immediate benefit to Crowleys DFK was the ability Intune gave it to centrally manage updates and apps on all devices, ensuring a consistent company-wide approach.<\/p>\n
Stephen and his colleagues can now make changes in one fell swoop rather than having to call each remotely working employee individually.<\/p>\n
<\/p>\n
Working together on the path to ISO 27001<\/strong><\/h2>\n
Richard Kavanagh from CWSI agrees that partnership is the key to success in these implementations. \u201cWe don\u2019t just give clients a solution,\u201d he says. \u201cWe look at their roadmap and where we can help them on their journey.<\/p>\n
\u201cNot all SMEs were looking at digital transformation or a hybrid working environment before the pandemic, but now they must. We\u2019ve all spent the last 20 or 30 years making sure that laptops are secure and compliant, but now you should be able to do exactly the same things on your mobile device as your laptop, so those devices need to be secure,\u201d he adds.<\/p>\n
\u201cNow you should be able to do exactly the same things on your mobile device as your laptop, so devices need to be secure\u201d<\/p>\n
Confident in their device and application security, Crowleys DFK is now looking ahead to the next phase of its journey to ISO 27001 certification, which will involve implementing Defender for Office365 with Office Advanced Threat Protection and Identity Management with Azure Active Directory.<\/p>\n
<\/p>\n