Managed Support Services for a Large Wealth Management Company

24 May 2024

The Client:

The client is a Investment and Wealth Management business in the USA.

The Need:

• In the aftermath of the security breach, the client urgently required remediation assistance to address the issues and establish proactive helpdesk and security monitoring services.
• Additionally, their dedicated IT help lacked expertise in managing Microsoft 365 (M365) and the Cloud Stack.

The Challenge:

• The client encountered a serious security breach with their global admin account compromised.
• The lack of expertise around M365 and the Cloud Stack within their dedicated IT helped further compound the challenge.

The Solutions:

• To address these challenges comprehensively, a multi-faceted solution was implemented.
• A current setup assessment was conducted, leading to recommendations for best practice setup, including Defender, Entra ID, Compliance, Device Management, and Azure Sentinel for alerts.
• These recommendations were then implemented as a one-time setup best practice. Additionally, a 16×5 help desk monitoring setup was established for alerts and security updates.

The Benefits:

• The implemented solution delivered numerous benefits for the client.
• It minimized human errors and security risks associated with manual processes while improving compliance with access control policies and regulatory requirements.
• Enhanced visibility and control over user access throughout the employee lifecycle, including device management and control, were achieved.
• The solution also provided support with requests around M365 best practice training and support.

Technologies Used:

Key technologies utilized in the solution included Defender, Entra ID, Compliance, Device Management, Azure Sentinel, and M365.

Conclusion:

• The solution provided the client with peace of mind after their traumatic security breach.
• By establishing a proactive measurement and monitoring system, minimal risks were ensured, allowing the team to focus on their core business activities rather than IT concerns.