Security Uplift Case Study
Secure Score up 41% for a financial services firm, with zero disruption.
How Reflective IT transformed the security posture of a London-based financial services firm using Microsoft Intune and Defender — raising their Microsoft Secure Score from 49.91% to 70.46% with zero disruption to day-to-day operations.
A structured endpoint security uplift across a mixed Windows and macOS environment, delivered in March 2026.
Our client had a Secure Score sitting below 50% — leaving significant exposure across their managed endpoint estate. With gaps in Defender coverage and no active Attack Surface Reduction policies in place, they needed a structured uplift delivered with minimal business disruption. Here's what we did.
- Updated Defender for Endpoint across Windows and macOS devices.
- Hardened the macOS firewall and enabled real-time antivirus protection.
- Deployed Attack Surface Reduction (ASR) rules to block common exploit techniques.
- Enforced platform hardening controls against code injection and script abuse.
From a 49.91% to a 70.46% Secure Score — a 41.17% relative improvement
The Challenge: our client, a London-based financial services firm, needed a structured security uplift to close the gaps that were holding their Secure Score below 50%:
- Secure Score sitting below 50%, leaving significant exposure across the endpoint estate.
- A mixed Windows and macOS environment created inconsistent policy coverage.
- Gaps in Microsoft Defender configuration left endpoints under-protected.
- No active Attack Surface Reduction (ASR) policies were in place to block common exploit techniques.
- The macOS firewall and real-time antivirus protection were not fully enabled.
- Any uplift needed to be delivered with minimal disruption to day-to-day operations.
What we did
Reflective IT delivered a structured, end-to-end endpoint security uplift for the client's environment:
Defender for Endpoint — Core & macOS
Updated core Defender components and resolved sensor data collection and impaired communications issues on macOS, restoring full endpoint visibility.
macOS Firewall & Antivirus Hardening
Enabled the macOS firewall across all devices and activated Microsoft Defender Antivirus real-time protection, significantly strengthening the macOS endpoint posture.
Attack Surface Reduction (ASR) Rules
Blocked Office applications from spawning child processes and injecting code. Prevented execution of obfuscated scripts, Safe Mode reboots, and abuse of vulnerable signed drivers.
Platform Hardening Controls
Enforced controls to block Office code injection and obfuscated script execution across all managed endpoints, reducing attack surface against malware and exploit-based threats.
Every initiative moved the needle on Secure Score
Points gained by initiative — each control contributed to the overall Secure Score uplift:
- Defender for Endpoint (Core & macOS) - highest impact on the overall score.
- macOS Firewall & Antivirus - a significant gain from closing the macOS coverage gap.
- Attack Surface Reduction Rules - a moderate gain from blocking common exploit techniques.
- Platform Hardening Controls - a supporting gain from blocking code injection and script abuse.
Customer benefits
This Security Uplift engagement delivered:
Higher Microsoft Secure Score
A structured uplift raised the client's Secure Score from 49.91% to 70.46%, reducing exposure across their entire endpoint estate.
Complete Windows & macOS coverage
Consistent Defender protection and firewall hardening across a mixed Windows and macOS environment, closing gaps that left devices unmanaged.
Reduced attack surface
Attack Surface Reduction rules block common exploit techniques, from malicious Office macros to abuse of vulnerable signed drivers.
Zero business disruption
The entire uplift was delivered without impacting day-to-day operations for the client's team.
Measurable, reportable outcomes
Clear before-and-after Secure Score metrics give stakeholders and auditors evidence of a demonstrable security improvement.
Ongoing resilience
Reflective IT continues to monitor and manage the client's security posture, so the improvement keeps compounding over time.
How it works
From initial assessment to a fully validated uplift, we managed the entire engagement end to end.
Complementary services
Many businesses combine a Secure Score uplift with:
Mobile Device Management
Cyber Resilience Uplift
Cyber Essentials Certification
Ready to improve your Secure Score?
We deliver structured security uplift programmes for businesses across London and the UK. Get in touch to discuss your requirements.
Get in Touch
Learn about Cyber Resilience Uplift
Further reading
Improve Your Security Posture with Microsoft Secure Score
Improve your security posture with Microsoft secure score What is Microsoft Secure Score? Microsoft Secure Score is a built-in security analytics tool within Microsoft 365 that measures your...
Free O365 Secure Score Report for Your Business
Free O365 Secure Score Report for Your Business What Is Microsoft Secure Score? Microsoft Secure Score is a built-in security analytics tool that measures your organisation’s security posture...
Mobile Device Management and Application Management
Mobile device management and application management with Intune What is Microsoft Intune? Microsoft Intune is a cloud-based service that enables organisations to manage mobile devices, laptops, and applications...
