Partner with us for reliable IT support. Contact us now and find out how we can streamline your IT needs!
Two related construction and trades businesses had shared one ageing IT environment for years, an arrangement that limited how independently either one could operate, secure itself or grow. A dedicated Microsoft Azure landing zone for each business, built on Brennan's Cloud Adoption Framework-aligned approach, has changed that, giving each one its own governed, benchmarked and independently secured environment.
Several related businesses had long shared one on-premises IT environment, limiting each one's ability to secure its own systems, manage its own devices and make its own platform decisions independently. Ageing hardware and virtualisation licensing were also approaching end of life.
Brennan built a dedicated Azure landing zone for each business, aligned to Microsoft's Cloud Adoption Framework, behind a Fortinet-secured hub-and-spoke network and Microsoft's own security stack.
Each business now runs on its own independently governed Azure environment, benchmarked against the ACSC Essential Eight and Australian Government ISM PROTECTED frameworks from the outset, with the shared datacentre dependency in its final stages of retirement.
This Australian construction and trades group operates across several related businesses, employing several hundred people at multiple sites. Historically, those businesses shared a single, on-premises IT environment, an arrangement that had served them well for years but was starting to limit each business's ability to manage its own security, devices and platform choices independently.
Ageing hardware and virtualisation licensing nearing end of life added a firm deadline to an already overdue conversation about separating the two environments properly.
Several related businesses had long shared a single IT environment, an arrangement that made each business's security posture, device management and platform decisions dependent on the others. None of them could move quickly without touching a shared system they didn't fully control on their own.
The group's shared datacentre hardware and virtualisation licensing were also approaching end of life, putting a firm deadline on the decision.
A prior infrastructure assessment, together with Microsoft's own review, pointed the same way: separate, cloud-based environments were the only path that solved for independence and growth at the same time.
Brennan built a dedicated Azure landing zone for each business, aligned to Microsoft's Cloud Adoption Framework, each with its own subscription, its own governance model and its own Role Based Access Control baseline, plus shared platform and non-production environments.
A hub-and-spoke network keeps every business's workloads isolated in its own spoke, with a Fortinet Next-Generation Firewall in the hub handling all ingress and egress traffic, hybrid VPN/IPSec connectivity and SD-WAN integration.
Microsoft Sentinel runs as the security information and event management layer, alongside Microsoft Defender for Cloud for security posture and workload protection, and Microsoft Purview for data loss prevention.
Each business has its own tiered Azure Backup policy, from short-retention weekly backups through to seven-year retention where needed, each with its own dedicated Recovery Services Vault.
The whole environment is benchmarked against the ACSC Essential Eight maturity model and Australian Government ISM PROTECTED controls from day one, with posture tracked continuously through Microsoft Defender for Cloud's own compliance dashboard.
Each business now runs on its own Azure environment, with its own governance, access control and backup regime, rather than one shared environment held together by policy and goodwill.
The build is benchmarked against the ACSC Essential Eight and Australian Government ISM PROTECTED frameworks from the outset, with posture tracked continuously rather than assessed after the fact.
Retiring the shared datacentre dependency is also removing the hard deadline the group was facing on ageing hardware and virtualisation licensing, along with the operational overhead of running shared print, firewall and endpoint security the old way.
With the platform foundations in place, the group has moved into an ongoing managed services partnership with Brennan, extending the same independently governed model into day-to-day operational support for each business.
How one of Australia’s largest professional associations (Australian Psychological Society) is transforming their digital services.
Facing the daunting task of uniting three independent tenancies in a merger, Better Health Network sought cohesive thinking to maintain critical health services.
Partner with us for reliable IT support. Contact us now and find out how we can streamline your IT needs!