← Field Track
🧵

Drew Fashion Studio

Apparel design & e-commerce · 12 staff · One studio loft + two remote designers

A 12-person design studio that sells online and at pop-up markets. Creative-heavy: mostly Macs, huge files, Adobe everywhere, and a Wi-Fi network that was set up by the landlord's electrician.

Compliance context · PCI (Payment Card Industry)-DSS awareness (card payments via POS and web store)

Security & operations posture

identity

35

endpoints

25

network

30

backup

20

documentation

10

Closing tickets properly raises the client's posture.

Open queue

#001HighMicrosoft 365 administration

Sarah cannot access Outlook

Sarah's Outlook shows 'Need Password' in the status bar and keeps prompting for credentials. Webmail in a browser works fine. Nobody else is affected.

#002NormalDevices & endpoints

New employee needs a laptop by Monday

A new e-commerce assistant starts Monday. Drew says 'just set her up like the others'. There is no standard build and no spare device documented.

#003UrgentIdentity & access

Employee lost the phone with Microsoft Authenticator

Marco's phone was stolen at a market on Saturday. He cannot sign in anywhere on Monday morning and has a client deadline.

#004HighNetworking & Wi-Fi

Wi-Fi works but SharePoint does not

Staff can browse the web and use Teams chat, but the SharePoint site and OneDrive sync fail on the studio Wi-Fi. On mobile data everything works.

#005NormalMicrosoft 365 administration

Employee deleted a shared document

The autumn production schedule vanished from the shared library. Tomás thinks he deleted it while cleaning up folders; it was last edited two days ago.

#006UrgentIdentity & access

Former employee still has access to company files

A designer who left three months ago appears in the activity log of the design library. Drew is alarmed and asks 'what else can they get to?'

#007LowEnd-user support

Printer works for everyone except one employee

Erin's print jobs disappear. Everyone else prints to the same colour laser without issue. She recently returned from three weeks away.

#008UrgentSecurity fundamentals

User clicked a phishing link and entered credentials

Sarah entered her password on a page reached from a 'shared invoice' email. Twenty minutes later a supplier received an email from her mailbox with new bank details.

Runbooks

People & access

  • Drew Okafor — Owner / Creative Director

    Global admin (should not be), all files

  • Sarah Lin — Studio Manager

    Finance, POS, shared mailbox

  • Marco Reyes — Lead Designer

    Design library, Adobe, large-file storage

  • Priya Nair — E-commerce Manager

    Shopify, marketing tools, web store

  • Tomás Alvarez — Production Coordinator

    Vendor portals, purchase orders

  • Erin Walsh — Bookkeeper (part-time)

    QuickBooks, banking portal

  • Six studio + sales staff — Assistants, sample makers, market staff

    Email, shared calendar, POS at markets

Technology stack

  • Productivity

    Microsoft 365 Business Standard (12 seats) · Outlook · Teams · SharePoint · OneDrive

  • Creative

    Adobe Creative Cloud (4 seats) · Dropbox (legacy, still in use) · Figma

  • Commerce

    Shopify · Square POS (2 terminals) · QuickBooks Online

  • Devices

    8 MacBook Pro · 2 Windows 11 laptops · 2 iPads (markets) · Colour laser printer · Large-format plotter

  • Network

    Business fibre 500/500 · ISP-supplied router · 8-port unmanaged switch · 2 consumer mesh access points

Network chain

  1. 01Internet — Business fibre, 500/500 Mbps, static IP not purchased
  2. 02ONT — Fibre terminal in the utility closet
  3. 03Router / Firewall — ISP-supplied gateway, default admin credentials
  4. 04Switch — 8-port unmanaged desktop switch, no VLANs
  5. 05Access Points — 2 consumer mesh units, single shared PSK, no guest network
  6. 06Endpoints — Macs, Windows laptops, iPads, printer, plotter, Square terminals

Known gaps

  • ▸Owner is the only global admin and uses that account daily
  • ▸MFA (Multi-Factor Authentication) is optional — 5 of 12 users have not enrolled
  • ▸Files live in three places: OneDrive, SharePoint, and legacy Dropbox
  • ▸No device management; Macs are unenrolled and unencrypted
  • ▸Backups are 'it's in the cloud, right?' — no tested restore
  • ▸Wi-Fi password shared with clients and market vendors