Customer Story
Barratt employees have corporate-owned iPhones and iPads and use applications that are both third-party and developed in-house. Applications are hosted on-premise and in the private cloud. These apps allow mobile workers to feed information into the company’s systems. One of these applications allows the company to build data entry forms for on-site health and safety reporting that can feed that information to an on-premise server. Like many companies today, Barratt Developments is carrying out a digital transformation program incorporating a ‘cloud preferred’ strategy.
With a growing number of workers outside the corporate perimeter, the Barratt team began looking into mobile security solutions to address the broad spectrum of mobile risk and played well with Microsoft tools. They had particular concerns about application vulnerabilities and phishing attacks reaching mobile users, including via SMS, email and social media.
BlueFort’s continuous discovery, validation, and control methodology is closely aligned and augments both the NIST framework and Gartner’s Continuous Threat Exposure Management (CTEM) principles. This focuses on identifying and validating risk factors that are important for the individual organisation and then taking a threat-led approach to preparation, risk reduction and control strategies.
Utilising the methodology, BlueFort’s consultants undertook a technical ‘deep dive’ of Barratt’s mobile threat surface, which gave them clear visibility of all devices connecting to its network. With an accurate technical blueprint of Barratt’s mobile threat surface, BlueFort was able to validate its cybersecurity state, highlighting actual and potential cybersecurity risks and then implement suitable controls.
Barratt Developments has a Security Operations Centre (SOC), which includes industry-leading Security Information and Event Management (SIEM) and Identity and Access Management (IAM) tools to secure corporate equipment and ports. It deployed BlueFort’s Threat Event Stream, which integrates with its SIEM solution.
Positive results have been achieved. One recent report showed that the platform had flagged 1,700 phishing attacks, including PayPal and Apple-branded attacks that users had clicked on. The platform was able to block any requests to these malicious sites, averting a potential attack.
The company conducts phishing training and tests via its SOC and has mandatory cybersecurity training for all colleagues to further improve the company’s overall security posture.
Its Head of security and compliance looks at the Mobile Threat Defence reporting, and provides the business with statistics, and insight on how many threats have been blocked. When it receives notifications for the latest threat, it looks for any relevant statistics and highlights to the business that the tools it uses are protecting them from security incidents people might be seeing in the news.
The company uses an industry-leading VPN solution for their laptops, but they don’t have a need for VPN on mobile as they use MDM tools to manage devices.
Having gone through the initial discovery and validation journey with a comprehensive review of its mobile threat surface and then completing a control phase to secure its mobile workforce, Barratt Developments is now taking advantage of BlueFort’s Evolve program to build out its broader security strategy, ensure all of its security tooling is working together correctly, and dig deeper into other critical areas in its security environment.
The Evolve platform gives BlueFort clients unlimited, on-demand access to industry experts who have gone through the vetting, testing and curation of exciting new technologies; to help organisations cut through the noise of the cybersecurity market, deliver proactive cyber market research, and provide enhanced support.
Barratt Developments is now leveraging the Evolve services platform to go beyond mobile security, working with BlueFort to take the same principles and methodology back to their external cloud surface and internal security environment.
By applying the same continuous discovery, validation, and control journey, Barratt Developments can maintain a dynamic security posture that continuously shifts in alignment with the most critical threats facing the organisation.
© Copyright BlueFort Security Ltd.
The cybersecurity sector faces an effectiveness challenge. Despite the constant emergence of new technologies, notable breaches still persist. To thwart these attacks, the industry must embrace a fresh strategy centered around security operations. This is precisely where BlueFort comes into play.
Addressing the complexity of cybersecurity, External Attack Surface Management (EASM) provides critical visibility, active testing and ongoing security controls.
Cyber Threat Intelligence (CTI) tailors security measures by collecting, analysing, and distributing bespoke insights to prioritise risk mitigation effectively.
Data security, evolving since the 1980s, faces challenges with the surge in data volume and dynamic technology landscapes.
Gartner’s Continuous Threat Exposure Management (CTEM) shifts cybersecurity to a proactive model, prioritising risks through a cyclical approach.
In the data-driven business landscape, success hinges on effective data management. BlueFort’s Optimised SIEM transforms data usage, ensuring control and visibility for robust cybersecurity.
Modern cloud complexities demand continuous security adaptation. Cloud Security Posture Management (CSPM) ensures compliance, risk mitigation and efficiency.
In the era of digital transformation, traditional security models fall short. Zero trust, with IAM, ensures continuous verification, enhancing cybersecurity against evolving threats.
Trust BlueFort Evolve for all your cybersecurity needs – the premier program in the UK, providing comprehensive subscription program and on-demand expertise.
Safeguard your digital assets with our Security Assessments. Identify vulnerabilities, mitigate risks and fortify your online defences.
BlueFort’s consulting capabilities empower cyber leaders to navigate pivotal moments securely and effectively, delivering strategy and technology solutions that make the difference when it matters most.
Flexible on-demand technical support services from vendor certified engineers, whenever you need it.
BlueFort are your trusted cybersecurity solutions partner. With a long pedigree in simplifying cybersecurity challenges, delivering continuous improvement and providing access to the best cyber expertise-on-demand, we’re here to help.
Protect your business with BlueFort, the UK’s leading cybersecurity solutions partner, offering comprehensive protection against evolving cyber threats.
Using best practice frameworks to deliver Continuous threat exposure management programs to our clients, we ensure simple, ongoing, incremental improvements to your cybersecurity posture.
Trust BlueFort’s team of cybersecurity experts to deliver unparalleled customer support, ensuring your peace of mind in an ever-evolving digital landscape.
Discover exciting career opportunities at BlueFort Security and take your professional journey to new heights.
Your one-stop destination for cutting-edge insights and tools in the realm of cybersecurity. Our hub is meticulously curated to provide you with a comprehensive range of resources, from informative articles and expert whitepapers to insightful webinars and practical guides.
Stay informed on the latest cybersecurity trends with BlueFort’s regular events and webinar recordings. Join us for insightful sessions and demos.
Discover a wealth of cybersecurity resources in our content library. Stay up-to-date with industry news, expert tips and informative blog articles.
Securing access to sensitive data, assets, and resources with multi-factor authentication (MFA) is a core cybersecurity component. Because MFA has proven to be so effective,