IT consulting · IT and ERP consultancy, Microsoft partner
Enterprise-scale Azure landing zone and audit preparation for an IT and ERP consultancy
- Duration
- 1 month
- Scope
- Enterprise-scale landing zone
- Focus
- Governance and audit preparation
Situation
An IT and ERP consultancy and Microsoft partner prepared a demo scenario for an enterprise-scale Azure landing zone. The scenario had to be deployed, scripted and documented so that it would meet Microsoft’s audit criteria. The internal core team, led by a lead engineer, was responsible for delivery and wanted an experienced sparring partner for architecture and governance questions, plus hands-on help during deployment and documentation. The focus was on governance and on preparing the scenario for the audit.
Approach
For one month, WCS advised the core team and supported the lead engineer in delivery.
- Landing zone: set-up and scripting of an enterprise-scale Azure landing zone for the demo scenario.
- Governance: Azure Policy, management groups, naming conventions and RBAC concepts.
- Documentation: deployment and documentation of the demo scenario together with the lead engineer.
- Quality assurance: review of the technical implementation and the documentation against Microsoft’s audit criteria.
Result
The consultancy has a deployed and documented landing zone demo scenario. Policies, the management group structure, naming conventions and role concepts are described in a form that can be traced against Microsoft’s audit criteria, and the implementation was reviewed against the same criteria. Because the core team led the work and WCS acted as sparring partner, the knowledge of how the landing zone is built stays with the consultancy’s own engineers.
More case studies
Public sector
Access governance, passwordless sign-in and BSI-aligned hardening for 40,000 users in one operating model
- Users
- 40,000
- Devices in Intune
- 1,500
Wholesale
Group-wide Azure security baseline, central CSPM and just-in-time admin rights for 30,000 users
- Users
- 30,000
- Duration
- since December 2025
Energy / critical infrastructure
Security principles, access controls and integration patterns built into the platform architecture
- Duration
- 4 months
- Role
- Security and platform architecture