Pharazon is a defence and security technology company that came to Munitus needing Cyber Essentials Plus at speed, and a secure Microsoft environment built to grow with them. We asked them how it went.
First, tell us about Pharazon. What do you do, and what drives the business?
Pharazon is a UK defence and security technology company that brings together specialist organisations, technologies and expertise to solve complex operational problems. Our aim is to create rapid routes through which good technology can be converted into usable capability. This is reflected in our mantra: "Coalitions of innovation. Outcomes at speed."
Where did security sit in your priorities as a young company?
As a new and growing business operating within the Defence sector, cyber security had to be built into Pharazon from the outset. We did not want to treat certification as a one-off compliance exercise. We wanted to establish a secure, scalable and professionally managed technology environment that would support the company as it grew.
How did you come across Munitus?
Munitus was recommended to us by one of its long-standing customers, which had worked with the company for more than ten years. That strength of recommendation, combined with Munitus' understanding of the security requirements associated with the Defence sector, gave us confidence that it would be the right partner.
What did you need Munitus to deliver?
Our immediate priority was to achieve Cyber Essentials Plus quickly. Beyond that, we wanted to prepare for the developing requirements of Defence Cyber Certification and ensure that our Microsoft tenant, devices, identities and information were being managed securely.
You needed to move fast. How did onboarding work in practice?
Speed was important, but so was structure. We needed an onboarding process that would move quickly without cutting corners or creating unnecessary disruption. Munitus provided a clear implementation plan, helped establish a secure Microsoft tenant and guided us through the technical and procedural changes required to prepare for certification.
Why the Power Stack?
We selected the Munitus Power Stack because it provided a coherent combination of cyber security controls, Microsoft services, device management and user support. The service was closely aligned with the requirements of Cyber Essentials Plus, while also providing wider improvements to the way we work. It gave us better control over devices and identities, strengthened our security posture and provided a more consistent and productive working environment.
And day to day - how has the service desk been?
The service desk experience has also been excellent. Requests are dealt with quickly and professionally, and the team communicates in a way that is straightforward and easy to understand. Importantly, Munitus does not simply resolve individual issues; its team considers how each issue fits within the wider security and technology environment.
Why was Cyber Essentials Plus specifically the certification you needed?
Cyber Essentials Plus was important to Pharazon because it provides independently verified assurance that essential cyber security controls are operating effectively. It is increasingly important when working with government, Defence customers, prime contractors and other organisations handling sensitive information. It also provided an important first step towards meeting future Defence Cyber Certification requirements.
How much of the certification work did Munitus take on?
Munitus managed the certification preparation in a practical and highly organised way. Its team reviewed our environment, identified any areas requiring attention and completed the necessary remediation as part of the process. Munitus gathered and organised the evidence required for the assessment and liaised directly with the IASME-approved assessor, significantly reducing the administrative burden on Pharazon.
How was the assessment itself?
The certification experience was remarkably smooth. We understood what was required, what actions were being taken and where we were within the process. Munitus enabled Pharazon to achieve Cyber Essentials Plus quickly while also giving us confidence that the underlying security arrangements were robust, sustainable and appropriate for our future growth.
Overall?
Munitus has been an excellent partner: knowledgeable, responsive and able to combine strong cyber security expertise with a clear understanding of the commercial realities faced by a growing company.
