A Leeds law firm passed Cyber Essentials Plus without disrupting fee-earners
An ageing on-premise estate and a client-mandated security deadline. Bebco modernised the endpoints, closed the gaps, and got the firm certified inside a term.
Headline result
Cyber Essentials Plus controls passed first time
A 180-seat law firm in Leeds
Leeds, United Kingdom
The challenge
What they were up against
The firm's three largest clients had begun writing Cyber Essentials Plus into their panel requirements. Without the certificate, the firm risked losing instructions worth a meaningful share of annual revenue. The problem was that nobody inside the practice owned IT security, and the estate had drifted: unpatched laptops, local administrator rights for every fee-earner, and a firewall configuration nobody had reviewed in years.
A previous supplier had quoted for a full hardware refresh and a nine-month project. The firm did not have nine months, and it could not take fee-earners offline. It needed the controls in place, evidenced, and audited before the next panel review.
The solution
What Bebco did
Bebco ran a gap assessment against the five Cyber Essentials Plus control themes, then remediated in priority order so the firm was defensible at every stage rather than only at the end.
- Deployed managed endpoint protection and enforced automatic patching across every device, replacing the manual, ad-hoc updates that had left machines exposed.
- Removed standing local administrator rights and introduced least-privilege access, so a compromised account could no longer reach the whole network.
- Rebuilt firewall and boundary rules, disabled legacy protocols, and enforced multi-factor authentication on email and remote access.
- Produced the evidence pack and coordinated the independent audit, so the partners had a clean certificate without touching the technical detail themselves.
The results
Measured, not estimated
Controls passed on first audit
From kick-off to certification
Fee-earner days lost to the rollout
“We expected months of disruption and instead barely noticed it happening. The certificate arrived, the panel review passed, and our people kept billing.”
Services used
The capabilities behind this result
Let's pressure-test your IT
Book a free, no-obligation assessment. We'll review your infrastructure, flag the risks, and show you exactly where Bebco would make a difference.