Phoenix Software > Content Hub > Case Studies > Middlesex University

Middlesex University

Founded in 1973, Middlesex University has grown to become a globally recognised university with a wide range of undergraduate and postgraduate courses. The university’s IT team of 56 professionals is responsible for managing the IT infrastructure across multiple offices and campuses for its 30,000+ students and 4,000+ faculty staff, of which 1,800 work part-time.

The university faced several challenges: Firstly, as a higher education institution in the UK, it is strongly encouraged to obtain Cyber Essentials certification, a scheme that helps organisations protect themselves against cyber security threats. Secondly, the university observed a significant number of personal devices being used by its part-time and permanent staff, posing a significant security risk and making Cyber Essentials compliance more complex. The need to secure personal devices and enforce compliance emerged as a critical challenge, driving the demand for an efficient endpoint management solution.

Cyber Essentials as the starting point, not the end

To obtain Cyber Essentials certification, institutions must meet a number of requirements for various aspects of their IT configuration, including firewalls, access control measures, user authentication (including multi-factor authentication), malware protection and patch management. In 2021 the Cyber Essentials standard was strengthened to include secure configuration for mobile devices and in particular BYOD (Bring Your Own Device).

With over 1,800 of its staff working part-time on their own devices, BYOD was a significant risk for the university; something which Paula Vickers, Director of CCSS, was particularly keen to get on top of. She was keen to ensure the university’s security posture met the standards required by Cyber Essentials.

Key facts

30,000 students
4,000 staff, of which 1,800 are fractional / part-time
56 IT professionals
Over 1,800 BYOD devices used by external staff (consisting of windows, Mac, iOS and Android)
Over 2,200 devices provides and managed by the IT team (1,800+ Windows, 302 Mac and 123 iOS devices)

Microsoft Partner of the Year Awards 2023

“For us, Cyber Essentials was only the starting point of our security journey, not the end. We had seen the growing frequency and effectiveness of attacks made against other universities. This was more than a compliance exercise for us. We wanted to bolster our position to be as secure as possible to reduce the likelihood of an attack succeeding.”

Paula Vickers, Director of CCSSMiddlesex University

Solution

In 2021 Middlesex University was looking for a partner to provide third line IT support. With Phoenix having been awarded “Microsoft Partner of the Year 2021” in education, it was on the university’s radar. After speaking with a number of providers, Middlesex University signed up to Phoenix’s Platinum Reactive and Bronze Proactive Support contracts in June 2021.

With support in place, the conversation soon moved onto cybersecurity, particularly when it came to BYOD and expanding on Cyber Essentials certification. After some initial scoping calls, Phoenix Software proposed Microsoft Intune as the most effective Mobile Device Management (MDM) solution for the university. Intune offered centralised device management, ensuring compliance with Cyber Essentials requirements and enabling effective security measures across the network. The solution encompassed a proof-of-concept (PoC) phase, workshops, and the subsequent deployment of Intune.

The PoC phase, conducted in February 2022, involved a series of workshops to assess the university’s requirements and design a high-level solution. The workshops covered Modern Windows Management, Microsoft 365 Security Workshop, Information & Protection and an overview of Microsoft Intune.

The workshops were followed by a 35-day engagement with Phoenix Software’s MDM expert to deploy and implement Intune across all devices within the university. Challenges addressed during the implementation included integrating Intune with the university’s existing tools like Jamf & Cisco ISE; and managing compliance for the personal devices used by fractional staff.

“We knew we would face some resistance from staff when rolling out Intune, particularly when it came to enforcing Multi-Factor Authentication (MFA). But we knew one week of minor inconvenience for our users would pale into insignificance when compared to the disruption that could result from a single cyberattack. Such an attack could take the entire university offline for 4+ weeks and cause untold financial and reputational damage.”

Paula’s team put extra effort into engaging those staff who only work with the university on a part-time basis.

The biggest challenge was getting these people to go through the process of registering their devices on the university’s portal when they only engage with us on occasional basis and often don’t read the emails we send them. We therefore asked university staff to help with communications. We also chose to move everyone to Intune during a single week so that we could prioritise support in a condensed timeframe.”

Paula Vickers, Director of CCSSMiddlesex University

Benefits

By implementing Microsoft Intune, Phoenix Software provided an effective solution to consolidate device management, enforce compliance, and enhance overall security beyond the standards expected by Cyber Essentials. Middlesex University experienced numerous benefits following the implementation of the Intune solution:

Cyber Essentials certification:
Signifying their commitment to data security and compliance.

Significant reduction in high-risk devices:
Intune profiled over 1,800 BYOD devices and found that the majority of BYOD devices were running out of date OSs. The number of high-risk devices was quickly reduced from 1,800 to just 35.

User education and knowledge transfer:
The process of deploying MDM and enforcing MFA provided an opportunity to educate users on security best practice, while the workshops proved to be an invaluable knowledge transfer exercise for the university’s IT staff.

Device management in one place:
With Microsoft Intune, the university can manage all of their devices and BYOD in one place, including Windows, Mac, iOS and Android.

Demonstrating best practice to their peers:
Paula’s team was invited to present their story to approximately 500 of their peers at an educational sector webinar run by the UCISA (Universities and Colleges Information Systems Association), the membership organisation that supports IT professionals working in the higher education sector.

Leverage BYOD benefits without raising security risks:
The university’s 1,800 part-time users are often self-employed and/or work with multiple clients, so they are much happier being able to use their own devices. At the same time, by not having to provide new devices to this many users the university benefits from significant operational cost savings.

Catering for exceptions:
The university was able to provide a better user experience for those staff who already met Cyber Essentials requirements elsewhere by refining Conditional Access requirements for these colleagues.

Through its partnership with Phoenix Software and the adoption of Microsoft Intune, Middlesex University successfully addressed their cyber security challenges and improved endpoint management, while allowing its staff to continue to enjoy using their own devices.

“When we started on this Cyber Essentials journey, we recognised that we needed to integrate our systems with a single authentication service to simplify our implementation of MFA. We therefore chose to deploy Microsoft Intune to simplify user authentication with our existing deployment of Microsoft Entra ID. Prior to deploying Entra ID we couldn’t see if a password was compromised, if software was out-of-date, OS out-of-date etc. Ultimately, we had no oversight as to which logins or devices were risky to us. Entra ID and Intune changed all that.”

Paula Vickers, Director of CCSSMiddlesex University

We’re here to help solve your challenges

Please fill in the form below and a member of #TeamPhoenix will get back to you.

Alternatively, you can call us on 01904 562200 or email us on [email protected].

About Phoenix

Phoenix enables digital transformation in the workplace, empowering UK organisations to innovate and transform with cloud and hybrid infrastructures data, AI, security, and collaboration tools. By understanding the individual goals of its customers, Phoenix delivers remarkable, outcome-focused IT solutions and services that allow UK organisations to make a difference to the lives of their employees, service users, and communities.

Phoenix is a signatory on the Race at Work Charter, and a Disability Confident and Living Wage employer. The company is also actively involved in encouraging more women into the IT industry.

How we handle data | Unsubscribe

Recent Blog Posts

29-04-2024 - Further co-engineering between the two global leaders, Microsoft and Dell, brings improved management and functionality in the form of ‘Premier...... Read more
25-04-2024 - Phoenix Software have been recognised for exceptional performance and innovation in Customer Cloud Data Security Phoenix announced today that it...... Read more
04-04-2024 - As we innovate, QR codes are becoming commonplace. From accessing restaurant menus to event tickets, QR codes offer convenience and...... Read more

Sign Up

Please enter your details below to opt-in for the latest news, events and industry updates from Phoenix.

You currently have JavaScript disabled. This site needs JavaScript enabled in order for it to run correctly. Some functions of the site may not be useable or the site may not look correct until you enable JavaScript.
Please enable JavaScript in your web browser.