Cybersecurity Implementation
The Griffin Institute
The Griffin Institute is a leading not-for-profit biomedical research and surgical training organisation. Based at Northwick Park in Harrow and with over 30 years of experience, the Institute is renowned for its pioneering work in translational research and its commitment to improving patient outcomes through innovation. They provide world-class training in robotic and Minimally Invasive Surgery (MIS), including microsurgery, laparoscopy, endoscopy and more.
Cutting-Edge Research
The Institute supports cutting-edge research into wound healing, tissue engineering, and medical device development and their facilities are Good Laboratory Practice (GLP) accredited and staffed by expert surgeons, anaesthetists, and scientists, making it a vital hub for both the NHS and the broader medical research community.
Given the sensitive nature of its work, ranging from preclinical studies to surgical education and clinical innovation, cyber security is of paramount importance throughout the business. The Institute handles confidential research data, intellectual property, and sensitive patient-related information, all of which must be protected from cyber threats.
Prior to partnering with TwentyFour IT Services Ltd, The Griffin Institute lacked a formal cyber security framework, leaving it vulnerable to potential data breaches, ransomware, and compliance risks.
The implementation of a comprehensive Security Operations Centre (SOC) and Security Information and Event Management (SIEM) solution was therefore not just a technical upgrade, but a strategic imperative to safeguard the integrity of its mission and operations.
Executive Summary
Prior to the engagement with TwentyFour IT Services Ltd, The Griffin Institute operated without any formal cyber security framework and therefore recognised that this needed to change to safeguard their operations and their data.
The gap in security left the organisation exposed to:
- Undetected threats and vulnerabilities
- Lack of visibility into endpoint and network activity
- No centralised incident response process
- No compliance reporting or audit trail
With no prior SOC or SIEM capabilities, this critical gap in security meant the organisation was vulnerable to increasing modern cyber threats. Recognising the growing threat landscape, The Griffin Institute partnered with TwentyFour IT Services Ltd to implement a modern, layered cyber security strategy.
TwentyFour IT Services Ltd supported Griffin to deliver a comprehensive cyber security transformation using a suite of advanced tools, Endpoint Detection & Response, Remote Monitoring and Management, SIEM, Cloud Monitoring and Alerts, and Zero Trust.
This case study outlines the challenges faced, the solutions implemented, and the measurable improvements in security posture, visibility, and incident response.
“TwentyFour IT Services has completely transformed our cyber security capabilities. We went from having no visibility to a fully managed SOC with real-time insights and Zero Trust enforcement. The monthly reviews and dashboards give us confidence and clarity.”
Cheryl, Facilities ManagerTechnical Solution Overview
TwentyFour IT Services Ltd worked with The Griffin Institute to provide a full suite of support and cyber security services to provide the peace of mind that the institute needed to focus on their business.
Real-Time Threat Monitoring
Our Real-Time Threat Monitoring solution was deployed as the core CSOC (Cyber Security Operations Centre) platform, enabling:
- 24/7 monitoring of endpoint activity
- Detection of malware, ransomware, and suspicious behaviour
- Automated alerting and triage by security analysts
- Integration with RMM for remediation workflows
This provided The Griffin Institute with its first-ever real-time threat detection and prevention capability.
Endpoint Management and Response
SIEM - Log Aggregation and Correlation
Cloud Application Monitoring
Zero Trust Enforcement
Outcomes and benefits
Enhanced Cyber Security Posture
The Griffin Institute now benefits from a multi-layered defence strategy with real-time threat detection, automated response, and Zero Trust enforcement.
Dashboards & Visibility
Custom dashboards provide live insights into endpoint health, threat trends, user behaviour and compliance status.
Monthly Service Reviews
TwentyFour IT Services Ltd conducts monthly reviews covering incident summaries, threat intelligence updates, policy recommendations and roadmap planning.
Incident Response
With Real-Time Endpoint Detection and Response, and Remote Management Monitoring and Remediation integration, incidents are triaged and remediated in real time, reducing dwell time and impact.
Conclusion
The Griffin Institute’s partnership with TwentyFour IT Services Ltd demonstrates how a well thought out, strategic, tool-driven approach can rapidly elevate an organisation’s cyber security maturity. By understanding The Griffin Institute’s needs, their industry, and their goals, it has meant that we have been able to provide a holistic IT and cyber security solution to ensure they achieve success.
“TwentyFour IT Services has completely transformed our cyber security capabilities. We went from having no visibility to a fully managed SOC with real-time insights and Zero Trust enforcement. The monthly reviews and dashboards give us confidence and clarity.”
Cheryl, Facilities Manager
