An Engineering Firm’s Cyber Essentials Journey

Executive Summary

This case study showcases an engineering firm’s security transformation through partnership with Lumina Technologies. Since August 2024, the client has undergone a remarkable journey to strengthen their security and has now achieved Cyber Essentials Plus certification, demonstrating how significant security improvements are possible with the right support.

Client Profile

• Industry: Engineering
• Partnership Start: August 2024
• Goals: Significant security improvements and Cyber Essentials certification

Lumina’s Security Journey Framework

Initial State

When the client joined Lumina in August 2024, they were ready to improve their IT security. This was driven by two factors: they wanted to strengthen their technical capabilities, and their clients were starting to require better cybersecurity.

Their existing setup, while functional for basic operations, presented several opportunities for improvement:

• There was no proper system for managing user accounts and devices
• Outdated and unsupported software and hardware
• Business continuity planning needed rethinking
• Engineers needed better tools for working collaboratively
• Login security needed strengthening with modern authentication

The Transformation Journey

Phase One: IT Infrastructure Modernisation and Cyber Essentials Certification (August 2024 – January 2025)

Working closely with the client, we carried out a comprehensive programme of improvements focused on building strong IT foundations:

IT Infrastructure Enhancement:

• Set up new network infrastructure
• Installed modern security systems
• Introduced centralised device management
• Created clear control policies

Security Modernisation:

• Added modern login security authentication
• Introduced secure collaboration tools
• Enhanced security policies
• Created a business continuity plan with the leadership team

Current Status and Future Direction

In just six months, all initial goals were achieved:

• Successfully implemented our baseline security plan
• Modernised network infrastructure
• Enhanced security controls
• Achieved Cyber Essentials Plus certification

This rapid progression demonstrates the client’s commitment to elevating their security maturity to protect their business and commercial interests.

Now Cyber Essentials Plus certified, they have strong foundations to progress to our Premium Security tier if desired.

Key Success Factors

Strategic Implementation

• Efficient roll out of modern security measures
• Focused approach to improvements
• Step-by-step progress through our security levels
• Cyber Essentials Plus certification

Technical Excellence

• Modern network setup
• Advanced security controls
• Comprehensive device management
• Enhanced system security

Conclusion

This transformation showcases how organisations can achieve significant security enhancements through focused effort and expert guidance.

The engineering client’s progress from basic security to Cyber Essentials Plus certification in six months proves the effectiveness of our structured approach.

The project took six months because we wanted the new security measures to become part of the company culture. Cultural change takes time, and we needed the firm’s engineers to support the process. While Cyber Essentials Plus can be achieved quickly, our personalised six-month plan ensured lasting success for this client.

The progress made by this engineering firm shows that with the right partnership, organisations can efficiently improve their security to meet modern standards. Their commitment to improvement has given them an advantage in securing future contracts.