Case study · Cyber Security

From the manufacturer’s network to Cyber Essentials Plus

When the manufacturer stopped running its dealers’ IT, two London Toyota centres had to stand on their own. We gave each its own network, Microsoft 365 and on-site support, then took them from Cyber Essentials to Cyber Essentials Plus.

Client: Two London Toyota centres · since 2019
Sector: Motor retail · Toyota dealerships
Location: London
Services: IT Support, Cyber Security

2019

both sites taken over from the manufacturer’s IT

Every year

Cyber Essentials renewed since the first certificate

CE+

passed October 2026, second centre in audit

The challenge

The manufacturer stepped back.

Both centres ran on IT supplied by the manufacturer: its network, its Windows domain, its servers and its hosted email. In 2019 it began withdrawing that service, and each dealership became responsible for its own systems.

At the same time, Cyber Essentials became a condition of the retailer agreement, followed by an annual security assessment by an independent auditor, with Cyber Essentials Plus as the 2026 target. Small teams selling and servicing cars needed one partner to run everything and answer the auditors for them.

What we did

What we put in place.

Took over the network

Moved each site off the manufacturer’s network onto its own Windows domain, rebuilt profiles, file shares and printing, and added backup, antivirus and monitoring.

Their own Microsoft 365

When the manufacturer’s hosted email ended in 2020, built each centre its own tenant and moved every mailbox across, keeping their existing addresses.

On-site IT

New PCs and servers, secure showroom Wi-Fi, business firewalls and leased lines, and day-to-day support for staff and the dealer software.

Cyber Essentials, every year

The first certificate landed ahead of the manufacturer’s 2019 deadline, and we have renewed it every year since.

Cyber Essentials Plus

Vulnerability scans, fixes inside the 14-day window, multi-factor sign-in evidence and a hands-on audit of sampled devices.

A playbook staff can use

23 policies, runbooks, forms and records in one register, plus PC1’s Cyber Security Assistant app, which works even if Microsoft 365 is compromised.

The outcome

What changed.

Independent and supported
Each centre runs its own systems, with PC1 as its IT team.
Cyber Essentials Plus
The first centre passed its audit in October 2026; the second is in audit now.
Ready for the auditors
PC1 is the named contact for the manufacturer’s annual security assessments.
Staff who know what to do
Search a situation, get the first step and open the right document, from phishing to a lost laptop.

Kit & technology