- Why Pay Extra for CIS18 & NIST Compliance Readiness? Next Level IT includes CIS18/NIST risk/gap assessments and readiness services in every package at no additional cost.
Challenge
eCoshop Club had scaled to serve a large and growing user base, but their file-sharing and collaboration workflows were outdated and risky. Employees were using unmanaged cloud drives and email attachments to share large media files, documents and sensitive data. This resulted in:
Little to no visibility into who accessed or modified files
Shadow IT, fragmented storage, and inconsistent permissions
No versioning, retention policy or audit trail in place
Non-alignment with critical security frameworks such as the CIS Critical Controls and Utah Safe Harbor protection
They needed a solution that enabled secure, streamlined sharing, bolstered cybersecurity posture and supported compliance — without slowing business down.
Our Process
At Next Level IT, we leveraged our Managed Services + Managed Cybersecurity + Compliance-as-a-Service model to deliver a unified solution. Our process included:
- A full gap assessment aligned with CIS18 IG1/IG2 to highlight file-sharing risks, identity/access exposures, endpoint & cloud vulnerabilities, and compliance deficiencies
- Migration of file sharing to a centrally managed platform (Microsoft 365: SharePoint & OneDrive) with role-based access, guest-sharing controls, link expiry, Zero-Trust policies (MFA, device compliance), encrypted transit & at-rest storage
- Deployment of 24/7 MDR/XDR monitoring, email threat protection, DLP/sensitivity classification for media & documents, logging/audit automation, and quarterly compliance reviews (AUP, IRP, WISP) with leadership dashboards for visibility
- We assembled audit-ready compliance artifacts, mapped controls to CIS18 IG1/IG2, and packaged documentation to support Utah Safe Harbor protections and industry regulatory expectations.
Category
Data Security
Client
eCoshop Club
Industry
Retail, eCommerce
Stack
Microsoft 365, SharePoint, Azure AD & Intune
Conclusion
The Solution
We delivered:
A consolidation of file-sharing into a secure, governed cloud platform under Next Level IT’s managed services umbrella
A fully managed cybersecurity stack protecting sharing workflows, endpoints and identities
Compliance readiness by documenting and aligning controls, audits and policies — enabling defensible posture under Utah Safe Harbor
Data Engineering
Shadow IT and unmanaged sharing reduced by ~80%, significantly lowering exposure risk
Channel Platforms
Employees now share large media files and documents securely and rapidly, with streamlined UX and enforced controls
Development
Alignment with CIS18 IG1 achieved within 90 days; a documented compliance program supports Safe Harbor and audit readiness