Drew Fashion Studio
Apparel design & e-commerce · 12 staff · One studio loft + two remote designers
A 12-person design studio that sells online and at pop-up markets. Creative-heavy: mostly Macs, huge files, Adobe everywhere, and a Wi-Fi network that was set up by the landlord's electrician.
Compliance context · PCI (Payment Card Industry)-DSS awareness (card payments via POS and web store)
Security & operations posture
identity
35
endpoints
25
network
30
backup
20
documentation
10
Closing tickets properly raises the client's posture.
Open queue
Sarah cannot access Outlook
Sarah's Outlook shows 'Need Password' in the status bar and keeps prompting for credentials. Webmail in a browser works fine. Nobody else is affected.
New employee needs a laptop by Monday
A new e-commerce assistant starts Monday. Drew says 'just set her up like the others'. There is no standard build and no spare device documented.
Employee lost the phone with Microsoft Authenticator
Marco's phone was stolen at a market on Saturday. He cannot sign in anywhere on Monday morning and has a client deadline.
Wi-Fi works but SharePoint does not
Staff can browse the web and use Teams chat, but the SharePoint site and OneDrive sync fail on the studio Wi-Fi. On mobile data everything works.
Employee deleted a shared document
The autumn production schedule vanished from the shared library. Tomás thinks he deleted it while cleaning up folders; it was last edited two days ago.
Former employee still has access to company files
A designer who left three months ago appears in the activity log of the design library. Drew is alarmed and asks 'what else can they get to?'
Printer works for everyone except one employee
Erin's print jobs disappear. Everyone else prints to the same colour laser without issue. She recently returned from three weeks away.
User clicked a phishing link and entered credentials
Sarah entered her password on a page reached from a 'shared invoice' email. Twenty minutes later a supplier received an email from her mailbox with new bank details.
Runbooks
People & access
Drew Okafor — Owner / Creative Director
Global admin (should not be), all files
Sarah Lin — Studio Manager
Finance, POS, shared mailbox
Marco Reyes — Lead Designer
Design library, Adobe, large-file storage
Priya Nair — E-commerce Manager
Shopify, marketing tools, web store
Tomás Alvarez — Production Coordinator
Vendor portals, purchase orders
Erin Walsh — Bookkeeper (part-time)
QuickBooks, banking portal
Six studio + sales staff — Assistants, sample makers, market staff
Email, shared calendar, POS at markets
Technology stack
Productivity
Microsoft 365 Business Standard (12 seats) · Outlook · Teams · SharePoint · OneDrive
Creative
Adobe Creative Cloud (4 seats) · Dropbox (legacy, still in use) · Figma
Commerce
Shopify · Square POS (2 terminals) · QuickBooks Online
Devices
8 MacBook Pro · 2 Windows 11 laptops · 2 iPads (markets) · Colour laser printer · Large-format plotter
Network
Business fibre 500/500 · ISP-supplied router · 8-port unmanaged switch · 2 consumer mesh access points
Network chain
- 01Internet — Business fibre, 500/500 Mbps, static IP not purchased
- 02ONT — Fibre terminal in the utility closet
- 03Router / Firewall — ISP-supplied gateway, default admin credentials
- 04Switch — 8-port unmanaged desktop switch, no VLANs
- 05Access Points — 2 consumer mesh units, single shared PSK, no guest network
- 06Endpoints — Macs, Windows laptops, iPads, printer, plotter, Square terminals
Known gaps
- ▸Owner is the only global admin and uses that account daily
- ▸MFA (Multi-Factor Authentication) is optional — 5 of 12 users have not enrolled
- ▸Files live in three places: OneDrive, SharePoint, and legacy Dropbox
- ▸No device management; Macs are unenrolled and unencrypted
- ▸Backups are 'it's in the cloud, right?' — no tested restore
- ▸Wi-Fi password shared with clients and market vendors