Robert Whowell & Partners LLP now operates with a secure, compliant access infrastructure that protects sensitive client data and meets the latest industry standards. The new system adds a critical layer of security, giving both partners and staff peace of mind when accessing systems from any location.
Client:
Robert Whowell & Partners LLP
Location:
Loughborough
Date:
2025
About the Project
In response to evolving regulatory requirements around data protection and access control, Robert Whowell & Partners LLP recognised the need to strengthen both remote and onsite system access across their network. As a firm handling sensitive financial and personal data, ensuring secure authentication methods became a critical priority to remain compliant with updated industry standards and best practices.
The goal was to implement a solution that enhanced security without introducing friction into the daily operations of staff—balancing usability with robust protection.
Our Solution
To meet these requirements, we delivered a comprehensive access control upgrade that included both strategic documentation and technical implementation.
Key Deliverables Included:
- Security Policy & Procedure Development:
We authored a detailed security policy outlining the firm’s approach to user authentication, remote access, password management, and account governance. This ensured full alignment with regulatory guidelines and provided a clear framework for internal auditing and staff responsibilities.
- Deployment of ESET Secure Authentication:
We implemented ESET Secure Authentication, a two-factor authentication (2FA) solution designed to protect all logins to the firm’s systems—whether from onsite workstations or remote connections. Each staff member was enrolled with the ESET mobile app to generate time-based one-time passwords (TOTP), significantly reducing the risk of unauthorised access.
- System Integration & Testing:
ESET was fully integrated with both Windows login environments and VPN connections. Thorough testing was conducted to ensure compatibility with all business-critical applications, file shares, and remote desktop services.
- Staff Onboarding & Support:
To ensure smooth adoption, we provided end-user training and documentation for the new login process. Our support team remained available during rollout to assist with user queries and authentication setup.
- Ongoing Monitoring and Enforcement:
The system now enforces consistent authentication standards across all access points. This is complemented by logging and audit trails for compliance reporting and security review.
