A Zero Trust workplace for a US financial services company
Situation
A regulated financial services company in the United States with a large Windows estate and high demands on security and auditability.
Question
Set up a modern workplace based on Zero Trust, in which identity, device and application are weighed at every access.
Approach
- Workplace architecture on Zero Trust principles, with Microsoft Defender XDR for detection and response
- Application allow-listing with App Control for Business, introduced in phases
- Central firewall management for the workplace
- Then grew into the role of cybersecurity architect and expert solution architect
Result
A workplace built from Zero Trust rather than around it, and an engagement that grew over four years from workplace architecture to security and solution architecture for the wider landscape.