Case study · Financial services
[Client name] passed a client security audit first time.
Client
[Client name]
Sector
Financial services
Services
Cyber Security, Microsoft 365
Timeframe
[X] weeks
[Photo: client team at work]
[X]Critical risks closed
[X]Weeks from gaps to evidence
[X]%Staff passing phishing tests
0Audit findings
The challenge
[Client name] had [X] weeks to answer a major client's security questionnaire. Their previous provider had told them everything was fine.
[One or two more sentences on the situation, in the client's own words where possible.]
The uncomfortable truth
Our audit found [X] accounts belonging to people who had left, default settings across Microsoft 365, and backups that had never been tested.
"It wasn't what we wanted to hear. It was what we needed to hear."
What we did
- Ranked every risk by business impact and fixed the top [X] first.
- Locked down identity, email and devices, then documented the evidence.
- Ran short staff training and phishing tests.
- Put 24/7 monitoring in place.
The outcome
[Client name] submitted its answers on time, with evidence, and passed with no findings. [Add the commercial result: contract won, renewal, premium reduced.]
More case studies