Collaboration context
Comprehensive IT environment modernisation for bus transport
SKAND Skalica, spol. s r.o. operates in bus transport, where a reliable, secure and transparent IT environment is an important part of everyday operations. The goal of the project was to modernise the original IT environment, increase the level of cybersecurity, improve device management and prepare the infrastructure for safer and more efficient operation.
The solution included management and expanded use of Microsoft 365, deployment of Microsoft Intune for computers and mobile phones, device enrolment into central management, creation of new servers in Microsoft Azure, migration of the original Azure servers to a new safer environment, backup implementation, monitoring, local network infrastructure changes, firewall configuration, switch configuration and building a new rack.
Initial state
An IT environment with several security and operational risks
Before the implementation, several weak points were identified in the IT environment that increased both operational and security risks. The environment was not centrally managed, the network infrastructure was unclear and the security of users, devices and access was not configured to the required level.
Microsoft 365 was used mainly for e-mail services, without broader use of identity management, security policies and central access control. Company phones were not enrolled into central management and the server environment was in an unsuitable state.
At the same time, more reliable backups, monitoring and physical technical background were missing or required modernisation. The original state was therefore a combination of technical, security and organisational challenges that had to be addressed as one whole.
- Missing central management of computers and mobile devices.
- Weaker security for users, access and endpoint devices.
- Microsoft 365 used mainly for e-mail services.
- Original Azure server environment intended to be rebuilt on new, safer servers.
- Inconsistent and unclear network infrastructure.
- Missing or insufficient backup setup.
- Outdated physical technical background including the rack.
- Lower readiness for cyber threats and operational incidents.
Solution goal
Build a safer, more modern and better manageable IT environment
The goal was to create a safer, clearer and better manageable IT environment suitable for the company’s everyday operation in bus transport.
The solution had to unify the management of users, devices, cloud services, server infrastructure and security policies. An important goal was also to improve the company’s readiness for cyber threats and operational incidents through better identity management, multi-factor authentication, Conditional Access policies, monitoring, backups and central control over devices.
- Increase the level of cybersecurity.
- Introduce central management of computers and mobile devices through Microsoft Intune.
- Expand Microsoft 365 usage beyond e-mail services.
- Create new servers in Microsoft Azure and safely move the original Azure servers to the new environment.
- Improve management of users, identities and access.
- Introduce more reliable backups and monitoring.
- Make the local network infrastructure clearer.
- Modernise the physical technical background.
Solution design
Connecting Microsoft 365, Intune, Azure, network and security
The solution was designed as a combination of Microsoft cloud services, central device management, security measures, backups, monitoring and modernisation of local infrastructure.
In Microsoft 365, identity, user and access management was strengthened. Microsoft Intune was deployed to manage computers and mobile phones. New servers were created in Microsoft Azure and the original Azure servers were moved to a new safer environment so that it could support the required business services in a more secure and manageable way.
The solution also included making the local network clearer, configuring the firewall and switches and building a new rack. The whole design was prepared to deliver practical improvements in security, management, availability and operational control.
Implementation process
From analysis to infrastructure modernisation
Analysis and modernisation design
Mapping the original IT environment, identifying weak points and assessing the use of Microsoft 365, the state of devices, server infrastructure, network, backups and security measures.
Microsoft 365, Intune and Azure deployment
Expanded Microsoft 365 usage, Microsoft Intune deployment, enrolment of computers and mobile phones, security policy configuration, creation of new Azure servers and migration of the original Azure servers to the new environment.
Network, security, backups and monitoring
Configuration of the local firewall and switches, making the network infrastructure clearer, backup and monitoring implementation and modernisation of the physical technical background including the new rack.
What we delivered
Key areas of IT environment modernisation
Microsoft 365 and identity management
The Microsoft 365 environment was configured and managed so that it was not only an e-mail service, but also a stronger foundation for managing users, identities, access and security rules.
The solution strengthened control over user accounts, access and security settings. Microsoft 365 became an important part of central business IT management.
Microsoft Intune and device management
Microsoft Intune was deployed for computers and mobile phones, allowing devices to be enrolled into central management. This made it possible to better manage security policies, device configurations, access to company data and basic endpoint usage rules.
Device enrolment into Microsoft Intune helped reduce risks related to inconsistent management of computers and mobile phones. The company gained better visibility of devices and more control over their use within the company environment.
Microsoft Azure and server environment
New servers were created in Microsoft Azure and the original Azure servers were moved to a new environment mainly to increase security. The solution was designed to support the required business services, improve security, availability, management and further scalability of the infrastructure.
The new server environment in Azure created a better foundation for safer operation of selected company services and future infrastructure expansion.
Backups and monitoring
The implementation included backups and monitoring for selected parts of the infrastructure. These measures help reduce the risk of data loss, improve visibility into the state of the environment and support faster response to technical or security events.
Local network, firewall, switches and rack
In addition to cloud services, the local infrastructure was also addressed. The work included configuration of the local firewall, switch configuration, improved network clarity and building a new rack.
Modernisation of the physical and network infrastructure contributed to better organisation of the technical background, higher transparency and safer operation of the local network.
Security measures
Higher readiness for cyber threats and incidents
Increasing the level of cybersecurity was an important part of the project. The measures were designed to improve protection of user accounts, devices, company data and access to services.
- Multi-factor authentication MFA.
- Conditional Access policies.
- Security policies in Microsoft Intune.
- Central management of computers and mobile devices.
- Encryption of supported devices.
- Password and access policies.
- Separation of user roles and permissions.
- Endpoint protection.
- Safer local firewall configuration.
- Clearer and more secure network infrastructure.
- Backups.
- Monitoring of selected parts of the infrastructure.
These measures helped increase control over users, devices and access while strengthening the company’s readiness for cyber threats and operational incidents.
Results
A safer, clearer and better manageable IT environment
The result was a safer, more modern and better manageable IT environment. SKAND Skalica gained better visibility over devices, users, access, cloud services and local network infrastructure.
Microsoft Intune deployment enabled central management of computers and mobile phones. Microsoft 365 started being used as a broader platform for user management, security and company services. In Azure, the server environment was rebuilt on new servers and complemented by measures to improve security, backups and management.
The local infrastructure was made clearer through network changes, firewall and switch configuration and building a new rack. Monitoring and backups contributed to better operational control and higher readiness for technical or security events.
- Safer IT environment.
- Central management of computers and mobile phones.
- Better control over users, identities and access.
- More effective use of Microsoft 365.
- New safer server environment in Microsoft Azure.
- More reliable backups.
- Monitoring introduced for selected parts of the infrastructure.
- Clearer and safer local network.
- Modernised physical technical background.
- Higher readiness for cyber threats and operational incidents.
Main benefits for the client
What the solution brought to SKAND Skalica
Higher level of cybersecurity.
Central management of computers and mobile phones through Microsoft Intune.
Better control over users, identities and access.
Safer use of Microsoft 365 services.
New safer server environment in Microsoft Azure.
More reliable backups.
Monitoring of selected parts of the infrastructure.
Clearer and safer local network.
Modernised physical technical background.
Higher company readiness for cyber threats and operational incidents.
Summary
Comprehensive modernisation of IT, cloud, devices and security
For SKAND Skalica, spol. s r.o., a comprehensive solution focused on modernisation, management and securing of the IT environment was delivered. The solution included Microsoft 365, Microsoft Intune, Microsoft Azure, central device management, backups, monitoring, local network configuration, firewall, switches and physical infrastructure modernisation.
The result is a safer, clearer and better manageable IT environment that gives the company a stronger foundation for everyday operations, data protection, device management and further development of digital services.
