Introduction

In a world where cyber threats are increasingly sophisticated and prevalent, securing sensitive data and maintaining robust cyber security protocols have become paramount.

labdesk, a managed IT and cyber security partner, has played a pivotal role in helping Draw Plan, an innovative architectural firm based in Birchwood Park, achieve the Cyber Essentials accreditation. This case study explores the collaborative project between labdesk and Draw Plan, highlighting the importance of Cyber Essentials and its benefits to businesses.

Who are ‘Draw Plan’?

Draw Plan is a full-service architectural firm with over two decades of experience in the architecture and building industry. Recognised for their superior expertise and commitment to delivering exceptional results, Draw Plan has garnered acclaim from clients both locally and internationally. As they look to expand their services into the nuclear sector, achieving the Cyber Essentials accreditation became a critical milestone.

The Project: Achieving Cyber Essentials

labdesk was engaged by Draw Plan with the objective of attaining the Cyber Essentials accreditation, a crucial requirement for exploring opportunities within the nuclear sector. The project entailed a thorough security remediation process to ensure that Draw Plan met the security standards set by the Cyber Essentials scheme.

Overview of Cyber Essentials

Cyber Essentials is a UK government-backed scheme designed to help organisations protect themselves against a wide range of common cyber threats. It provides a clear framework of basic security controls that organisations should implement to safeguard their IT systems and data. The five key areas covered by Cyber Essentials are:

• Firewalls and Internet Gateways: Ensuring the organisation's internet connection is secure.
• Secure Configuration: Securing devices and software to reduce vulnerabilities.
• User Access Control: Ensuring that only authorised individuals have access to systems and data.
• Malware Protection: Implementing adequate protection against malicious software.
• Patch Management: Keeping software up to date with the latest security patches.

Benefits to the Draw Plan team on achieving ‘Cyber Essentials’

Achieving Cyber Essentials offer the Draw Plan team many benefits, including:

• Enhanced Security: Reduces the risk of cyber-attacks by implementing basic security measures.
• Compliance: Meets the requirements of various regulatory frameworks and industry standards.
• Customer Trust: Demonstrates a commitment to cyber security, instilling confidence in clients and partners.
• Business Opportunities: Opens doors to new markets and sectors, such as the nuclear industry, which mandate Cyber Essentials accreditation.
• Cost Savings: Prevents potential financial losses associated with data breaches and cyber incidents.

Project Implementation

labdesk’s approach to achieving Cyber Essentials for Draw Plan was meticulous and comprehensive. The process included:

• Initial Assessment: Conducting a thorough audit of Draw Plan's existing IT infrastructure and identifying areas needing improvement.
• Security Remediation: Implementing necessary security controls, including firewall configurations, secure device settings, user access management, malware protection, and patch management.
• Training and Awareness: Educating Draw Plan's staff on cyber security best practices to ensure ongoing compliance and security awareness.
• Certification Process: Guiding Draw Plan through the official Cyber Essentials certification process and ensuring all requirements were met.

The outcome

The successful collaboration between labdesk and Draw Plan has not only resulted in achieving the Cyber Essentials accreditation but also positioned Draw Plan strategically for future growth within the nuclear and associated sectors. By adhering to the standards of Cyber Essentials, Draw Plan has enhanced their cyber security posture, safeguarded their sensitive data, and demonstrated their commitment to excellence and security.

Want to learn more about Cyber Essentials?

➡️Cyber Essentials Official Website

For the most up-to-date information, guidelines, and application processes, the official Cyber Essentials website (www.cyberessentials.ncsc.gov.uk) is an invaluable resource.

➡️National Cyber Security Centre (NCSC)

The NCSC provides a wealth of resources, including guidance documents, toolkits, and best practices, to support organizations in their journey towards Cyber Essentials accreditation. Explore their resources at www.ncsc.gov.uk.

➡️Getting Certified

If you are interested in learning more about Cyber Essentials, the process or getting certified - Book a FREE discovery call today with the labdesk team: labdesk.co.uk/discovery

➡️Want to improve your security?

If you want to find out how secure your Microsoft 365 environment is, and receive instant recommendations that will help you improve your security you can take the FREE labdesk MS365 security scorecard.