Greggs Foundation Strengthens Cyber Security with Quorum Cyber's Clarity Managed Security Service
HIGHLIGHTS
- Small team, no dedicated cyber resources
- 24/7 monitoring by Quorum Cyber's Security Operations Centre
OVERVIEW
Nearly 40 years of community support - and the need to protect it
The Greggs Foundation is the independent charity associated with Greggs – a leading UK food-on-the-go retailer. They have been supporting communities for nearly 40 years through a series of impactful grant-giving programmes which in 2025, totalled over £5.4m. With a small team delivering large-scale impact, technology plays a vital role in helping the team to operate efficiently and securely.
THE CHALLENGE
Cyber security without the expertise or resource to manage it
Like many charities, cyber security wasn’t something they had the expertise or resource to manage effectively. The team rely heavily on Microsoft 365 and digital systems to deliver their work, manage grant applications, and support their programmes, but they didn’t have a dedicated cyber team or the skills or resource to monitor threats to their network.
Greggs Foundation is increasingly aware that cyber risks are on the rise but also that the impact of those attacks can be severe and have long-term consequences to how they deliver their work. They knew they needed to do more to protect their systems to ensure a continuity of service and minimise risks.
THE SOLUTION
A fully managed cyber security monitoring service built around their needs
Quorum Cyber provided Greggs Foundation with Clarity, a fully managed cyber security monitoring service. From the outset, this approach was easy to follow and very much based around their needs. Rather than overwhelming them with technical detail, Quorum Cyber worked alongside them to put the right foundations in place.
The service brought together Microsoft Security Technology and Quorum Cyber’s own threat intelligence and expertise to ensure they have a dedicated team monitoring their systems on their behalf.
This meant that they had a level of protection that would have been impossible for them to resource internally.
A SMOOTH, SUPPORTED ONBOARDING
Guided through each step - without needing to become experts overnight
The onboarding process was straightforward and collaborative. Quorum Cyber guided Greggs Foundation through each step to configure the environment and ensure everything was set up correctly, giving them a quick transition to service delivery.
As a small team, this was invaluable – it meant they didn’t need to become experts overnight, but were able to build processes to support how they manage risks going forward.
£5.4m+
In grant programmes delivered in 2025
24/7
Monitoring by Quorum Cyber’s SOC
THE IMPACT
Peace of mind - and stronger protection for their charitable work
Since working with Quorum Cyber, Greggs Foundation has peace of mind knowing their systems are being monitored 24/7 by specialists. That reassurance alone has been a huge benefit to the wider team so that they know they have stronger protection against cyber threats and alerts are assessed and acted on quickly by Quorum Cyber’s Security Operations Centre.
“Quorum Cyber has really taken the time to understand us as a charity, our challenges, and what kind of risks and threats we are dealing with – something we have really valued in their approach.”
– Sally Cooper, Systems & Operations Manager, Greggs Foundation
“Quorum Cyber’s Clarity managed security service has given us confidence that our systems are continuously monitored and protected against constantly evolving cyber threats. As a small team, having access to their expert support is invaluable, allowing us to focus on delivering our charitable work.”
– Sally Cooper, Systems & Operations Manager, Greggs Foundation
CLARITY MANAGED SECURITY SERVICE
The same 24/7 protection, built around your team
Protecting Client Trust with Managed Data Security
HIGHLIGHTS
- Global professional services organisation, 13,000 users
- Extended detection and response to data security and insider risk
SOLUTIONS
- Clarity Data
- Microsoft Purview Insider Risk Management
- Microsoft Purview Data Loss Prevention
- Microsoft Purview Information Protection
- Microsoft Sentinel
THE CHALLENGE
Visibility and control over sensitive data across a distributed, project-led environment
For a global professional services organisation delivering major infrastructure programmes, capital projects, and government-backed initiatives, protecting sensitive client and project data is fundamental to maintaining trust, ensuring compliance, and safeguarding commercial outcomes.
From transport and energy infrastructure to large-scale real estate developments, the organisation manages vast amounts of commercially sensitive data across its Microsoft 365 environment. This includes project controls data, cost estimates, procurement records, contract documentation, and client-owned intellectual property.
To support secure delivery across complex, multi-stakeholder programmes, the organisation needed greater visibility and control over how sensitive data was stored, accessed, and shared, as well as clearer insight into potential insider risk and data loss exposure.
Delivering large-scale infrastructure and capital programmes requires extensive collaboration across internal teams, clients, contractors, and public sector stakeholders, creating a dynamic data environment where sensitive information is continuously shared across organisational and geographic boundaries.
The organisation needed to protect:
- Commercially sensitive cost models, bids, and project financials
- Confidential contracts and supplier agreements
- Government and public sector project data subject to strict compliance requirements
- Client-owned intellectual property and strategic programme information
Risks included accidental data exposure, misconfigured sharing, and insider-driven data loss, any of which could result in financial penalties, contractual breaches, regulatory scrutiny, or damage to client trust.
Although Microsoft 365 E5 licensing provided advanced security and compliance capabilities, the organisation required specialist expertise to operationalise these tools into an effective, continuously managed data security function.
THE SOLUTION
A fully managed data security capability built on Microsoft Purview
Quorum Cyber worked closely with the organisation and Microsoft to operationalise data security across its Microsoft 365 estate.
A comprehensive data security assessment provided visibility into sensitive data across project and corporate environments, identifying where critical information resided, how it was being used, and where risks were emerging across programmes, regions, and teams.
The organisation then adopted Quorum Cyber’s Clarity Data managed data security service to continuously manage and mature its data protection capabilities.
Quorum Cyber deployed and managed Microsoft Purview capabilities, including Insider Risk Management, Data Loss Prevention, and Information Protection. These controls were aligned to real-world project scenarios, such as protecting bid data, restricting sharing of cost models, and safeguarding regulated public sector information.
Integration with Microsoft Sentinel enhanced detection and response, enabling faster identification of insider risk, policy violations, and anomalous data activity across distributed project teams.
This approach enabled the organisation to scale data security in line with its global project delivery model, without adding internal complexity.
THE RESULTS
A managed capability that extends beyond traditional cyber defence
The organisation now operates a fully managed data security capability that extends beyond traditional cyber defence to address insider risk, data governance, and data loss prevention across major programmes and projects.
Improved Visibility and Control
Over sensitive data across its Microsoft 365 environment, including project-specific and client-owned information.
Detect and Respond to Insider Risk
Strengthened Compliance
With government, regulatory, and contractual requirements across the projects it supports.
Reduced Operational Burden
On internal teams, while avoiding the cost and complexity of building an equivalent in-house capability.
By partnering with Quorum Cyber, the organisation avoided the cost and complexity of building an equivalent in-house capability.
13,000+
Users across the global
Microsoft 365 estate.
