Real engagements with real Irish businesses. Every case study below is drawn from our direct experience — the situations are genuine, the work is ours, and the outcomes are verified. We have anonymised the organisations to protect client confidentiality.
Case Studies
Food Processing (NIS2 — Important Entity): Business process mapping for a food manufacturer in scope for NIS2
A large food processing company had been designated an 'Important Entity' under NIS2 and needed to understand which of its business processes had IT dependencies — and where single points of failure existed that could halt production. Outcome: the client gained a clear, board-presentable view of its operational technology risk, a defensible compliance artefact for the NCSC, and a sequenced plan to eliminate the highest-risk dependencies without disrupting production.
Multi-Site Business Group (Business Email Compromise): Post-incident response for a Donegal group that lost over €1m to BEC fraud
A regional Donegal-based multi-national group of companies suffered a business email compromise (BEC) attack in which fraudsters intercepted and manipulated email communications to redirect a significant payment, losing over €1 million before the fraud was detected. Outcome: the root cause was identified and closed. New payment controls and verification procedures were embedded across the group. Staff are now trained to recognise the social engineering techniques used in BEC attacks, and the organisation has significantly reduced its exposure to this class of fraud.
Fishing Industry (Ransomware Recovery): Ransomware recovery and backup remediation for a fishing industry firm
A fishing industry firm suffered a ransomware attack that took over ten office staff offline for three weeks; backups existed but had never been properly tested or validated, so approximately two weeks of operational capability was lost. Outcome: the firm recovered and now has a tested, validated backup capability that has been proven to work. Recovery time objectives are documented and rehearsed, and the organisation is confident a future recovery would take days, not weeks.
Healthcare (Operator of Essential Services): Third-party risk management programme for a healthcare essential services operator
An operator of essential services in the healthcare sector relied on a wide range of suppliers and technology vendors but had no structured process for assessing the security risk those relationships introduced into its supply chain. Outcome: the organisation now has a defensible, repeatable process for managing supply chain security risk — a direct NIS2 requirement for essential services operators. High-risk suppliers have been assessed and remediation actions agreed, and the programme provides the board with ongoing visibility of third-party risk exposure.
Hospitality (Network Segmentation): Secure guest Wi-Fi implementation for a Donegal hotel
A Donegal-based hotel needed to provide reliable, secure Wi-Fi for guests while ensuring guest devices were completely isolated from the hotel's own business network — including its property management system, payment terminals, and back-office systems. Outcome: guests now enjoy reliable Wi-Fi access, and the hotel's business systems are fully protected from any activity on the guest network. The hotel has a documented network architecture it can present to insurers and auditors, and the team understands how to maintain the separation going forward.
Could Your Business Be Our Next Case Study?
Every engagement starts with a conversation. Book a free 20-minute call and we will give you an honest assessment of where you stand and what you should prioritise first. You can also take our free security maturity assessment.