Secure devices, passkeys and a Copilot agent for a Swiss planning firm

Starting point

With around 120 employees, devices were not uniformly managed and sign-in relied on passwords. The planning and engineering firm wanted to reduce the attack surface without complicating everyday work. At the same time, manually looking up building regulations for project questions regularly cost time.

Approach

Device management was fully migrated to Microsoft Intune and devices were hardened and kept up to date. Identity was modernised on Microsoft Entra ID, with Conditional Access and phishing-resistant sign-in through FIDO2 passkeys. WORXSPACE additionally developed custom Copilot agents, among others one that answers building-regulation questions straight from the relevant regulations.

Result

• Phishing-resistant sign-in with passkeys instead of passwords alone
• Centrally managed, hardened devices through Microsoft Intune
• Building-regulation answers from an agent instead of manual searching through documents