Strengthening Cybersecurity & Network Access Control

Situation

Following years of organic growth and acquisitions, the client’s IT estate had become fragmented, with a mix of systems and inconsistent operational models. Despite IT spend exceeding 10% of annual revenue, the organisation’s digital maturity remained below the level required to support its strategic ambitions.

Coupled with this, critical vulnerabilities in the IT environment had been identified. Investigations identified weaknesses in End User Computing (EUC), particularly inconsistent compliance with Network Access Control (NAC) policies.

In response, the client launched the NAC Project as a key initiative to strengthen its cybersecurity defences and ensure consistent network protection across its global footprint.

Approach

To lead the NAC improvements, the client identified the need for deep subject matter expertise in Forescout, their chosen NAC platform.

Interval was engaged to provide a specialist NAC Consultant to deliver the technical scope of the project. The key objectives were to:

• Review, update and deploy NAC policies

• Increase policy compliance across device types

• Improve overall network protection

Our consultant worked closely with the client's Infrastructure and Security teams to review and address almost all sites globally.

Custom workflows were developed for key device categories including Windows, macOS, Servers, IoT, and Storage. After securing agreement from device owners, a successful pilot was run at a single site before workflows were rolled out globally. Compliance monitoring was strengthened through regular reporting, automated alerts, and both user acceptance and penetration testing.

Outcomes

Phases 1 (pilot) and 2 (global rollout) were delivered on time, with the pilot completed within two months and full deployment within six months.

The project enabled the identification and remediation of a large number of non-compliant devices - significantly reducing risk and strengthening the organisation’s cybersecurity posture.

Additional value was delivered by integrating third-party systems into Forescout, increasing transparency and improving visibility across the NAC infrastructure.

With a more secure EUC estate now in place, the client is in a position to explore BYOD and virtual desktop solutions as secure, cost-effective ways to provide internal access to resources.