Our Approach
We partnered with Cisco to deploy Secure Access, their SSE platform, and rebuild our security architecture from the ground up on Zero Trust principles. No incremental fixes. A full shift from perimeter-based defense to cloud-delivered, identity-driven security.
The engagement started with a risk-based assessment of our existing environment. We mapped every gap, prioritized by exposure, and built a phased roadmap to transition without disrupting daily operations for 80,000+ users.
- Identity-first access control: We moved authentication from network location-based to identity- and context-driven. Every connection now validates the user, device posture, and application context before granting access. No implicit trust.
- Unified security platform: We consolidated fragmented point solutions into Cisco's integrated stack: Secure Web Gateway, Cloud Access Security Broker, Data Loss Prevention, DNS Security, Firewall-as-a-Service, Intrusion Prevention, and Advanced Malware Protection. One platform. One policy engine. One view.
- Zero Trust Network Access (ZTNA): For 6,000 users requiring private application access, we deployed ZTNA and VPN-as-a-Service through Cisco Secure Private Access, replacing legacy VPN infrastructure entirely.
- Proactive experience monitoring: We layered in Cisco's Experience Insights for real-time Digital Experience Monitoring, giving our teams visibility into performance issues before users reported them.
The design philosophy throughout was simple: secure everything, complicate nothing. Every component had to reduce friction for our people while strengthening protection across the environment.