Client project
Industry: Legal & Professional Services
Locking Down Case Files a Firm Cannot Afford to Leak
- Microsoft 365
- Entra ID
- Conditional Access
- Data loss prevention
- Immutable backup
Delivery duration: Defined after discovery; no verified delivery record published.
Overview
A firm whose entire value sits in documents that must stay confidential and must survive.
The Challenge
Case files live on a shared drive every employee can read, partners work from personal laptops on client Wi-Fi, and there is no record of who opened what. A single ransomware event, or one departing employee with a USB stick, ends the practice.
The Solution
Access is granted per matter rather than to everyone, enforced by group membership and reviewed on a schedule. Conditional access requires a managed device for anything outside the office. Data-loss rules block case documents leaving by mail or removable media. Backups are immutable, held off-site, and restored on a test schedule so recovery is known to work before it is needed.
How we verify success
Before implementation, we agree on a baseline and acceptance criteria. Performance, security checks, recovery tests, and operational handover are documented against that baseline. No improvement figure is claimed here without a verified measurement.