The Organisation
Strawberry Hill Trust is a UK-based heritage organisation responsible for preserving and promoting Strawberry Hill House, an iconic Gothic Revival villa. The Trust manages visitor experiences, educational programmes, and conservation projects, ensuring the historic site remains accessible and secure for future generations.
The Challenge
Strawberry Hill Trust required a comprehensive IT upgrade to improve security, modernise infrastructure, and enhance operational efficiency. Key objectives included increasing their Microsoft Secure Score, implementing Conditional Access, and completing a SharePoint migration for data still stored on an on-premises server. Additionally, the Trust needed Intune setup and device enrolment, decommissioning of the on-site server, installation of new workstations, EPOS PCs, and laptops, and WEEE recycling of old equipment. To strengthen cybersecurity, Sophos MDR deployment was also required. The challenge was to deliver these improvements seamlessly while maintaining business continuity and safeguarding sensitive data.
The Approach
We executed a structured project plan covering all requirements:
- SharePoint and OneDrive Migration for remaining on-premises data, ensuring secure cloud storage and collaboration.
- Intune Setup and Device Enrolment for desktops and laptops, enabling centralised management and compliance.
- Microsoft 365 Security Enhancement Project, including Conditional Access configuration, Defender Standard Policy activation, and updates to anti-phishing, anti-malware, and anti-spam policies.
- Creation of a Quarantine Policy, global settings refinement, and user consent controls to prevent unauthorised access.
- Implementation of Data Sensitivity Labels, company branding, and restrictions on Outlook add-ins and external calendar sharing.
- BYOD App Protection for secure mobile access.
- On-site Server Decommissioning, installation of new workstations, EPOS PCs, and laptops.
- WEEE Recycling of old equipment, including the server.
- Deployment of Sophos MDR for advanced threat detection and response.
These measures collectively improved security, streamlined operations, and ensured compliance with industry standards.
The Results
Strawberry Hill Trust now benefits from a modern, secure IT environment. Migrating to SharePoint and OneDrive has enhanced collaboration and reduced reliance on legacy systems. Intune provides centralised device management, while Conditional Access and updated security policies significantly reduce cyber risks. Sophos MDR adds an extra layer of protection, ensuring proactive threat monitoring. Staff enjoy improved performance with new hardware, and the organisation meets sustainability goals through responsible recycling. Overall, the Trust has achieved a robust, future-ready infrastructure that supports its mission and protects sensitive data.
Key Outcomes
- Successful migration of all remaining data to SharePoint and OneDrive
- Enhanced Microsoft 365 security with Conditional Access and updated policies
- Intune deployed for device management and compliance
- Sophos MDR implemented for advanced threat protection
- Legacy server decommissioned and equipment responsibly recycled
- New workstations, EPOS PCs, and laptops installed for improved performance
