The problem: A legal firm had accumulated shared folders, individual working practices and inconsistent access permissions. Staff could get the work done, but finding the right document took too long and confidential information was harder to control than it should have been.
How we identified it
We reviewed how documents moved through the firm, who needed access at each stage and where staff were relying on email attachments or duplicated files. The underlying issue was not one broken system. It was a workflow that had grown without a consistent security model.
What we did
- Mapped access around teams, roles and genuine working requirements.
- Restructured shared document locations to make active matters easier to navigate.
- Reduced unnecessary permissions and tightened external sharing.
- Strengthened Microsoft 365 account protection and recovery controls.
- Introduced a clearer joiner, mover and leaver process.
The outcome
Staff gained a simpler route to the information they needed while the firm gained stronger control over confidential documents. Day-to-day work became more consistent, access reviews became easier and security no longer depended on individual habits.