Groundwork East is an organisation working closely with local communities to improve their lives and their local areas. As a local hub for the East of England, the organisation has a head office in Hertfordshire alongside offices in Henley, Luton, Huntingdon, and Norwich. With more than 94 users across many different locations, Groundwork East has required a resilient and collaborative IT infrastructure that has allowed them to work seamlessly.
We have been their preferred IT supplier for many years, helping to ensure that they have the right systems in place to enable their work to flourish.
The Challenge
As part of our regular work with Groundwork East, we take a proactive approach to ensuring that their IT systems are fully supported. We noted that the client could benefit from having Cyber Essentials certification to verify their resilience and protection against cyber security. We presented a business case to the client and explained what the benefits would be. Once Groundwork East signed off the agreement, we began to prepare the assessment.
At this point, we were able to establish what needed to be done to ensure that Groundwork East would pass the Cyber Essentials certification. We knew that many machines needed upgrading, and this was an ideal opportunity to ensure that each user had the opportunity to work from the latest software updates.
As a result, we upgraded a significant number of machines from Windows 7 to the newest Windows 10 inclination.
We also assessed the machines that were held in storage to ensure that they were also updated. Any machines that were no longer suitable for use were removed from the network and replaced with alternatives.
An Added Pressure…
Our initial assessment was about preparing Groundwork East in advance of applying for Cyber Essentials certification. By creating a roadmap for new systems and upgrades, we were laying the foundations for the application.
Coincidently, whilst we were in the midst of upgrading the systems, Groundwork East received details of a new tender that required Cyber Essentials certification as a requirement for application. However, for Groundwork East to apply for this tender in advance of their deadline, we needed to apply for, and secure, the Cyber Essentials certification within just a few days.
Our Approach
As we had already begun preparing the foundations for the Cyber Essentials certification, we felt that it was achievable to gain this certification within the client’s fast timescales.
We had already met with key members of the Groundwork East team to set out the expectations and requirements and create a suitable plan of action.
Thanks to our remote working software, we were able to update the majority of the machines to the latest Windows 10 technology as a priority. This meant that we were able to eliminate the need for any unnecessary travel where possible. However, some site visits were required to assess the machines that were in storage.
Once we felt confident that each user was working from an upgraded machine with access to the latest software, we were able to collate the paperwork required for the Cyber Essentials application.
The certification process is predominantly admin-based. It required us to have evidence of how resilient the Groundwork East team was to online threats. Once we had everything in place, we were able to complete and submit the application promptly.
The Timescales
Our proactive approach to Cyber Essentials certification meant that we were in a positive place to be able to support Groundwork East when they needed the certification quickly.
We had proactively identified the need for certification and presented a business case to the client in Autumn 2020. This gave us several months to fully assess the system and identify areas for improvement or upgrades. During these months, we were able to implement our recommendations and improve their systems in advance of applying for Cyber Essentials certification.
When the client received notice of a potential tender that required Cyber Essentials accreditation, we had less than a week to complete and submit the application. Thankfully, our proactive approach to working with our clients meant that we had already laid the foundations for what was needed, and we were able to seamlessly meet these expedited timescales.
The Results
Thanks to our preparation, we were in a good position to make the Cyber Essentials application at a time to suit the clients’ needs. Upon submission of the Cyber Essentials paperwork, we quickly found out that we had passed the requirements with a 100% pass mark.
Typically, most Cyber Essentials approvals come with a series of recommendations for further improvements. We were thrilled for Groundwork East that their application for Cyber Essentials was approved with zero cautions or recommendations.
This success was because we had been proactive in our approach in identifying what the client required before they knew that it was needed.
Thanks to the improvements, Groundwork East now has demonstrable proof that their systems are far more resilient to online threats. The Cyber Essentials certification gives them more scope to apply for new business opportunities, and it is a verified marker of their commitment to security.
But the true measure of success isn’t just in the achievement of the Cyber Essentials certification.
Thanks to the continuous updates and upgrades over the last few months, end users can now benefit from more reliable IT systems. As they now have access to the latest technology, they can work far more collaboratively and effectively. What’s more, as a result of the Cyber Essentials certification, individuals are far more aware of how to protect themselves online.
What The Client Says
“Groundwork East is proud of the working relationship we enjoy with Lucid. They are a fantastic, supportive and generous business partner who guide us through an increasingly complex landscape deftly. We look forward to many more years of continued success.”
James Newell
Executive Director, Groundwork East