A Data Governance Approach to Microsoft Purview
Why Microsoft Purview with Bridewell?
- Implementing Microsoft Purview for Effective Data Governance and Compliance: Our approach to implementing and deploying Microsoft Purview is driven by data governance, with a focus on ensuring your organization is compliant with relevant data privacy regulations. Our Microsoft, Cloud, and Data Privacy experts will work alongside you to understand regulatory risks within your environments and remediate them through Purview’s data, compliance, and governance capabilities.
- Expertise in Cloud Security and Threat Protection with Microsoft Purview: As one of Microsoft’s leading cybersecurity partners, our team are designated solution partners for Security. We hold specialisms in Cloud Security and Threat Protection and have extensive experience in deploying Purview for some of the UK’s largest and most highly regulated organizations.
The Benefits of Purview
Our team will help you deploy Microsoft Purview quickly and effectively, so you enjoy the following benefits.
Identify Risks to Your Data
Assess your current data privacy programme for any ongoing risks.
Identify Risky User Behaviour
Identify any user behaviour that risks non-compliance or a data breach.
.svg?sfvrsn=428a1942_1){kind=icon}
Achieve Best Practice for Data Protection
Meet relevant requirements for regulatory compliance and industry best practice.
Ease the Pressure on Your Security Team
Our SOC team will take on responsibilities from your in-house security team, allowing them to dedicate time and resources to other activities.
AlfaPeople is a market leading provider of Microsoft Business Solutions, including Microsoft Dynamics. With 14 offices located across Europe, the Middle East, and the Americas, AlfaPeople delivers tailored, integrated platforms based on Microsoft Dynamics to its 500 strong customer base to improve customer service, operations and sales. In the UK, AlfaPeople works across a number of sectors, including healthcare, financial services, public sector, manufacturing and professional services.
The Challenge
As a result of working with clients in highly regulated industries, AlfaPeople needed to demonstrate that is has the right compliance and cyber security practices in place. The company embarked on achieving internationally recognised ISO certification, for both quality management (ISO 9001) and information security (ISO 27001). In addition, the company was bidding for a major project where compliance played a major role.
“We’re a rapidly growing expanding business. With the right frameworks in place, we can assure our growing client base that not only do we have the best practices and processes in place for quality management, but that their data is safe with us, which is a key differentiator in today’s climate,” explained Phillip Rawlinson, MD of AlfaPeople UK.
“Achieving ISO 9001 also means that we have the right foundation to scale up more quickly and be more agile in our approach.”
However, in preparation of the audit and accreditation process, the company identified a lack of in-house resource to dedicate to the task. Bridewell was brought in to assist with the certification and implementation of the frameworks.
The Solution
Bridewell is a specialist cyber security and data privacy consultancy that delivers a range of solutions, including support, management and audit services around achieving ISO accreditation.
The Bridewell team worked with AlfaPeople to understand what was required, what processes were already in place, and what needed to be implemented from a framework point of view.
Based on the demands of the project and looking at the longer-term benefits of implementing a standards framework, Bridewell recommended a business management system to deal with the control of all the associated documentation. The system would also act as a resource for employees and auditors to source the evidence and documentation needed as part of the initial audit, as well as future audits.
Since implementing the business management system, AlfaPeople has been able to centralize its processes, policies and procedures. This includes standard templates for contracts and working with third parties, as well as procedures on employee behavior and adherence to security policies.
“It’s a great point of reference for our employees and a fantastic resource for the ISO qualifications, but it also helps us with the way we work with our customers and suppliers. It’s helped us win new business and contracting for that business, because we can prove we have the infrastructure in place,” said Rawlinson.
The Results
Bridewell prides itself on a 100% first-time success rate when it comes to helping customers become ISO accredited. In the case of AlfaPeople, this also proved to be true. The company achieved its certification for both standards first-time round, and in a lot less time than its other offices.
“Bridewell was extremely knowledgeable and efficient. They looked at what we had in place and then made recommendations on where we needed to improve, what documentation was needed to support that, and what additional training we needed. The team worked with us right from scoping out the requirements to preparing us for the external audit with the auditors.”
“The project went according to plan, in terms of budget and deadline, and achieving the accreditation has enabled us to win new customers and is a key differentiator for us, especially ISO 27001. I would recommend the Bridewell team, based on their professionalism, expertise and high quality of service delivery,” concluded Rawlinson.
Start your Microsoft Purview Journey with Bridewell
Speak with one of our consultants to see how we can support your organization with Microsoft Purview.
How it Works
Data governance isn’t just about technology, but how organizations use, process and secure data. Our Purview deployments prioritize understanding how your employees handle data so we can implement policies that support their ways of working.
Data Discovery
Our cloud security and data privacy teams will hold discovery workshops to understand:
- Your current approach to data classification, retention and data loss
- Any challenges with how your users access and share data
- Your goals with Purview
Our team will review your current approach against applicable data protection legislation and best practice standards.
Any areas of non-compliance or data risk will be highlighted immediately.
Design and Implementation
Based on our findings, we will recommend updates to relevant policies and provide a test deployment of our proposed labelling solution to address these shortcomings.
This test deployment ensures there is no risk to your current operations and allows our team to optimize your Purview deployment before it is moved to a live environment.
Why Us?
180+ Security Specialists
Our team have diverse experience across sectors and disciplines, and hold accreditations from numerous industry bodies.
Certifications
Our people and services are highly accredited by leading industry bodies including CREST, the NCSC, and more. Our SOC holds extensive accreditations from CREST (including for CSIR and SOC2) and works closely with our cyber consultancy services.
Partnerships
As a Microsoft Partner, we also hold advanced specialisms in Cloud Security and Threat Protection. We’ve also implemented some of the UK’s largest deployments of the Microsoft Security stack, inc. Sentinel, Defender, Purview and more.
