Healthcare and Care Organisations
Staff device security for a therapy and counselling practice
Secured laptops and session notes for hybrid clinical work.
Therapy practice, ~10 practitioners, hybrid sessions
The challenge
Practitioners mixed personal devices with session notes stored in consumer cloud folders without encryption or MFA.
What we delivered
- Improved security of staff devices and sensitive documents.
- Issued standard encrypted laptops with policy-controlled storage.
- Migrated notes workflow to compliant Microsoft 365 structure.
- Enabled MFA and session timeout policies.
Business improvements
- Reduced risk of client note exposure on personal devices.
- Practitioners accessed records more consistently for remote sessions.
- Practice owner had clearer IT support ownership.
Illustrative outcomes
Illustrative outcomes from representative engagements; results vary by scope, starting point and contract terms.
Phased out
Personal device use
For client record access
100%
Data location clarity
All notes in managed tenant
↓ ~35%
Support tickets
Standardised devices and access
