Like many start-ups, Spiden's IT is based, among other things, on the flexible Bring your own device (BYOD) principle. The rapid growth and the increasing requirements for compliance and data security soon showed that the existing implementation was reaching its limits. 

At Spiden AG, business data/accounts with private devices were protected with Multi Factor Authentication (MFA), but were available without systematically enforced restrictions, such as specific local security settings. Now the data on the BYOD devices (Windows, Apple, Android) should be even better protected by a clear security concept. 

Another goal was to centrally manage all devices with a simple setup.  

Spiden's management was also no longer satisfied with the operation and support provided by its own employees - they wanted to focus more on their core business instead of struggling with IT projects and operations.  
 

Using Azure Active Directory, Beyondtrust Privelege Access Management and Intune / Autopilot as well as MFA (Multi Factor Authentication), Spiden has now taken a big step towards security. The costs remain manageable due to the CSP licensing, which also enables monthly billing. 

With the extensive security tools of the Microsoft Cloud platform, the security requirements could be optimally covered. The introduced solutions enable a security standard that was previously reserved for large companies at a low monthly price. The licenses are billed monthly in the Cloudsolution Provider Model (CSP) and can be flexibly expanded or reduced at any time to meet the needs of the company.  

The solution is operated in Operation Care with a dedicated service manager. He knows the infrastructure and its specialties as well as the needs of spiders and functions as a central switchboard and escalation level. Together with the Baggenstos operations team for support and operation, a high quality service can be provided, so that the users can work productively and without disturbances.   

According to current studies, the Mulltifaktor Authentication (MFA) is able to fend off 99% of all attacks and the data is now much better protected.  

Users also appreciate the possibility of being able to reset the password themselves and thus not having to rely on the helpdesk in the event of an incident. 

The central software administration with Intune and the Mobile Device Management have proven to be very successful and now enable the efficient and secure management of licenses and users. Devices in use must now meet minimum security requirements. All data remains in the apps and cannot be shared or copied. Especially secure: Apps can be deleted from the device (e.g. in case of loss). A quick installation of new devices and/or software is now possible. Using autopilot and the associated standardization of the client setup, everything now runs twice as fast.  

Conclusion: With the new solution, the employees of Spiden AG will be able to work and communicate much more easily and securely in the future.  
 

. 

The fulfillment of the high security requirements in combination with a flexible BYOD approach was one of the challenges during the realization of the project. This manifested itself in the motto: private devices must remain private and the security of the company should nevertheless always be guaranteed. It must also be possible to delete business data (e.g. in case of theft, employee leaving the company, etc.) However, thanks to the flexibility and the scope of performance of the Microsoft solutions used, these challenges could be mastered.  

Spiden's Linux environment could be optimally integrated into the solution thanks to the good cooperation with the external partner Leanux.