Cases

Five representative, anonymised engagements, describing the situation, the work carried out and the outcome without identifying clients or publishing figures.

Representative engagement · BACKUP & RECOVERY

Restoring trust in backups

Situation

Backups ran every night, but a full restore had not been tested.

Work carried out

Mapped what was backed up, where, and for how long
Closed gaps for systems that were missing
Ran a test restore of a critical server in isolation
Wrote a short, step-by-step recovery runbook

Outcome

A critical server was restored in an isolated test, and a step-by-step recovery runbook was documented.

Representative engagement · MICROSOFT 365

Cleaning up a Microsoft 365 tenant

Situation

A tenant that had grown over years: old accounts, inconsistent sign-in rules and unclear admin rights.

Work carried out

Reviewed accounts, licences and admin roles
Introduced multi-factor authentication and consistent sign-in policies
Separated everyday and administrative accounts
Documented the setup for the internal team

Outcome

A tidier tenant with fewer standing admin rights and clear rules for new users.

Representative engagement · VIRTUALISATION

Moving to a new virtualisation platform

Situation

Ageing hosts and an older hypervisor that was becoming hard to support.

Work carried out

Inventoried virtual machines and their dependencies
Built and tested the new platform before any move
Migrated workloads in planned windows with a rollback path
Updated backup and monitoring for the new platform

Outcome

Workloads running on the new platform, with backups and monitoring in place from day one.

Representative engagement · ISO 27001 READINESS

Preparing for an ISO 27001 audit

Situation

A management decision to pursue ISO 27001, with policies drafted but technical controls not yet in place.

Work carried out

Gap analysis of technical controls against Annex A
Implemented access, logging, backup and hardening measures
Collected evidence in a form an auditor can follow
Walked the internal owner through each control

Outcome

Controls working in practice and evidence ready for the external audit. Certification itself is done by an accredited body.

Representative engagement · MONITORING

From silent failures to early warnings

Situation

Problems were noticed when users called, not when systems started to fail.

Work carried out

Agreed which systems and signals actually matter
Set up monitoring and alerts with sensible thresholds
Automated routine checks and reports
Tuned alerts to keep noise low

Outcome

Issues surfaced earlier, with fewer surprises and less noise.

My promise

Tell me the problem, and I’ll work with you to try to fix it.

Discuss your task