A European Hospital Network Passes HIPAA-Equivalent Audit and Blocks Ransomware Lateral Movement

A European hospital network with operations in three countries, managing approximately 4,200 endpoints including clinical workstations, medical imaging systems, nurse call infrastructure, and administrative devices. The organisation was subject to NIS2 (healthcare sector, mandatory) and GDPR, and had received regulatory notification of an upcoming NIS2 assessment. A parallel concern was the increasing frequency of ransomware targeting hospital systems across Europe.

A Retail Chain Achieves PCI DSS 4.0 Compliance Across 340 Locations

A European retail chain with 340 store locations, processing payment card transactions at approximately 2,800 POS terminals and employing a central IT team of 12 people for the entire estate. PCI DSS 4.0 became mandatory in March 2024; the organisation's QSA had identified Requirement 6.3 (patch management) and Requirement 11.3 (penetration testing evidence) as the two highest-risk non-compliance areas.

A Healthcare Group Deploys Zero Trust Clinical Network Across 24 Sites

A healthcare group operating 24 clinical sites (hospitals, outpatient clinics, and diagnostic centres) across two European countries. The organisation was undertaking a network modernisation programme driven by three simultaneous requirements: NIS2 network resilience obligations, GDPR-mandated technical measures for ePHI transmission security, and the operational reality that clinical Wi-Fi performance was inadequate in several high-density sites.