Abbi Clinic

Back to Case Studies

Overview

Abbi Clinic is a specialist eating disorder clinic with sites in Manchester and Preston, providing treatment and support to young people and adults. The clinic offers both day care and outpatient treatment programmes, delivered by a multidisciplinary clinical team.

The challenge

As Abbi Clinic has grown, their IT setup had grown alongside it without a centralised system or management, and it became apparent there was a requirement for securing and modernising the estate, and working with a technology partner that understands their organisation and vision, with security and compliance at the forefront.

Central to this was the need to ensure devices, users and data were kept secure, whilst remaining accessible and enhancing productivity.

What we did

• Upgraded devices from Windows Home to Windows Pro
• Set up Entra ID for identity and access management
• Licensed the team under Microsoft 365 Business Premium
• Deployed Microsoft Intune to manage security policies and support hot-desking and multi-user devices with custom branding to ensure consistent corporate identity
• Removed shared logins on conference and meeting room devices, replacing them with delegated access
• Aligned device configuration and security controls at or above Cyber Essentials requirements with fully managed corporate devices, with personal mobile phones secured using MAM app protection and data-loss-prevention controls
• Configured conditional access policies based on minimum device security and compliance status
• Geographic M365 login restrictions to further reduce their exposure
• Deployed Microsoft 365 backups covering all corporate data
• Commenced managed services with vulnerability scanning and security patching covering Microsoft and 3rd party applications

The outcome

• Devices and user identities are managed centrally, replacing the previous ad-hoc setup
• A single, consistent security standard is enforced across the organisation
• Hot-desking and multi-user devices are supported without relying on shared logins
• Device and access controls are aligned to Cyber Essentials
• New devices can be quickly deployed with the same uniform, secure configuration guaranteed
• Patching and security actively maintained
• The team has time back, with day-to-day device, IT support and security management handled by Fruity IT