Prominent UK architecture practice strengthens its cyber security posture with NormCyber

This award-winning, multidisciplinary architecture consultancy has been designing high-quality buildings that enrich the lives of users and their communities for more than 50 years. From regenerating inner-city estates and master-planning new neighbourhoods to designing commercial, industrial and residential buildings, and helping clients meet evolving sustainability and safety objectives, the practice focuses on delivering smart, responsive solutions.

Headquartered in London, the practice employs 350 people across studios in the UK and continental Europe, with employees also regularly working from home and on-site at client locations. This highly mobile workforce makes cyber security a top priority. Furthermore, with clients including large organisations, public sector bodies and local authorities, demonstrating a strong security posture is essential.

The challenge

The challenge

The consultancy has always invested heavily in cyber security solutions. However, with an in-house IT team of just four — and no specialist cyber security expertise or round-the-clock support — it recognised potential gaps in its defences, particularly outside working hours and as more employees embraced remote working.

Furthermore, with many of its clients — including local authorities and high-profile organisations — placing the security credentials of their supply chain partners under increasing scrutiny, the company wanted to ensure it could clearly demonstrate its cyber resilience.

Identifying and closing gaps in its defences had also become a key business priority. The senior leadership team was determined to avoid the cost and widespread disruption associated with ransomware attacks, which had already affected several industry peers.

As the company’s technical director, responsible for all IT, explained:

“Cyber criminals don’t work nine-to-five, so it was important we had eyes on our infrastructure on a 24/7 basis. We’d engaged specialist security service providers before, but they tended to be large, multinational organisations that didn’t really speak our language, and couldn’t provide us with a consistent team or level of service. It was important to us that we found a cyber security partner we could trust to manage and augment our existing tech stack, and that was also a good cultural fit for our company.”

Achieving Cyber Essentials Plus accreditation

In 2024, the consultancy decided to appoint a new cyber security partner, initially to help the company achieve Cyber Essentials Plus accreditation. This UK Government-backed certification scheme provides independent verification that an organisation has implemented essential security controls to protect against common cyber threats.

Not only would this provide the company with a stronger foundation for its security operations, it would also help meet the requirements of clients increasingly requesting proof of accreditation as part of their procurement processes.

The company was introduced to Norm through a personal recommendation, supported by its experience helping UK organisations achieve Cyber Essentials certification.

As the technical director explained:

“From day one, the Norm team was refreshingly different from our previous security suppliers. Their plain-speaking advice, responsiveness and motivation to do a great job gave us immediate confidence that we’d made the right decision in appointing them.”

An ongoing, strategic partnership

Having supported the company through the rigorous technical audit required for Cyber Essentials Plus, Norm’s remit was expanded. Today, it provides a comprehensive range of Cyber Security Managed Services, including threat detection and response, vulnerability management and human risk management.

Central to the delivery of these services is Norm’s Focal Analyst: a named senior security expert with deep knowledge of the client’s environment, who acts as an extension of the in-house team.

Meeting formally with the client each month, with ongoing communication in between, the Focal Analyst goes beyond reporting on threats and vulnerabilities identified or mitigated. They translate security intelligence into clear, prioritised actions that strengthen the company’s cyber resilience over time, whether through improvements to technology, policies or processes.

To date, the Focal Analyst has worked with the in-house team to introduce and refine ongoing employee training programmes, rationalise the number of software applications employees can access as standard, revise the BYOD policy and increase the deployment of security agents across the consultancy’s devices, strengthening its endpoint defences.

“Our Focal Analyst knows our infrastructure inside out, so is constantly looking for ways for us to improve our security posture and reduce our exposure to risk,” the technical director continued. “Their proactive and knowledgeable advice is invaluable.”

The Focal Analyst is supported by Norm’s 24/7 UK-based Security Operations Centre (SOC), which continuously monitors the company’s infrastructure, providing rapid threat detection and response alongside proactive threat hunting.

Measurable benefits

The consultancy can now quantify and track improvements in its cyber resilience through Norm’s Smartbloc Portal, which provides the in-house team with real-time visibility into its security posture. Through the portal, the team can monitor its Cyber Resilience Score, understand its exposure to risk and identify where action is most urgently needed.

In the first six months of the partnership, the company achieved a 72% reduction in vulnerabilities across its network. By helping the in-house team identify and prioritise the vulnerabilities that present the greatest risk, Norm has also enabled it to make more effective use of its limited time and resources.

Cyber security training modules have also been embedded into the company’s induction process, with monthly refresher courses helping employees stay informed about emerging threats and evolving social engineering techniques. Completion rates consistently reach around 95%, demonstrating strong employee engagement with cyber security.

As the technical director explained:

“Norm’s reporting and metrics give us clarity over the threats we face and allow us to measure the effectiveness of our ongoing security investments. The data is also useful for understanding how we compare with similarly sized companies in our industry. Our objective is to be as safe as we can possibly be, and Norm’s intelligence gives us the confidence that’s the case.”

A trusted partnership delivering real-world value

Reflecting on the partnership, the technical director concluded:

“Working with Norm has been a gamechanger for our organisation’s security. We now have eyes on our network 24/7 and can rest assured that we’re well placed to deflect or respond to an attack. But it’s not just Norm’s quickfire response to immediate threats that’s impressive. It also plays an integral role in shaping our security strategy, advising us on the solutions, processes and policies that will reduce our longer-term exposure to cyber risks.”