Zivid
Fractional security lead: MDM, Defender, Intune and security tooling
Zivid designs and builds industrial 3D cameras for robotics and automation. Ahmed worked with the company for around two years on a part-time retainer as its information security lead — the model we now offer as the vCISO service — starting with a mobile device management programme and growing into ownership of the whole security stack, before handing a monitored, documented environment to an internal engineer.
The brief
Give a fast-growing engineering company senior security ownership for 15–30 hours a month: start by finding every device, writing the policy for how they are used, selecting and rolling out a management platform; then bring up the security tooling, report fortnightly to stakeholders, and leave the internal team able to run it.
What was delivered
Device management programme
- Inventory of every mobile device and laptop in use, and a device-use policy agreed with the business before any tooling was chosen
- MDM selection against the company's requirements, with Intune chosen and implemented; policies, compliance and configuration written for the Windows, Mac and mobile estate
- Deployment to all devices, integration with the existing identity, email and application stack, and testing and validation before sign-off
Security tooling
- Microsoft Defender brought up and configured at the centre of the security stack, with monitoring and alerting tuned so that the team sees what matters
- Hardening of Microsoft 365 and identity alongside the device work; ongoing advice and hands-on help with technical incidents as they arose
Governance and reporting
- Fortnightly written report and review with stakeholders throughout the engagement
- Security posture tracked against a prioritised roadmap; policies and procedures written to match how the company actually works, including regulatory and customer requirements
- Change control for scope, so the retainer stayed predictable as the work expanded from MDM into the wider security programme
Handover
- Structured handover to an internal engineer who now runs Defender, Intune and the day-to-day security operation
Not sure where your business stands?
Book a free 30-minute call. We will tell you the three things we would fix first — no report to buy, no hard sell.