--- title: MedHealth description: MedHealth, an organisation that supports whole populations to better work outcomes, recently engaged The Missing Link to undertake a comprehensive security review of their physical assets, people and processes. image: https://www.themissinglink.com.au/hubfs/Case%20study%20image%20-%20MedHealth.png --- [![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ](https://www.themissinglink.com.au/) - [Client Portal](https://themissinglink.myportallogin.com.au/) - [Remote Support](https://get.teamviewer.com/themissinglinkqsupport) - [![Call Us](https://www.themissinglink.com.au/hubfs/svgs/tml-phone.min.svg) Call Us ](tel:1300%20865%20865) - [![Support](https://www.themissinglink.com.au/hubfs/svgs/tml-support.min.svg) Support ](tel:1300%20865%20000) - [![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ](https://www.themissinglink.com.au/) Search The Missing Link Search - Enable High Contrast - [Client Portal](https://themissinglink.myportallogin.com.au/) - [Remote Support](https://get.teamviewer.com/themissinglinkqsupport) - [![Call Missing Link](https://www.themissinglink.com.au/hubfs/svgs/tml-phone.min.svg) 1300 865 865 ](tel:1300%20865%20865) - [![Phone Missing Link Support](https://www.themissinglink.com.au/hubfs/svgs/tml-support.min.svg) Support 1300 865 000 ](tel:1300%20865%20000) - Cyber Security × Overview Our Cyber Security solutions are designed to keep your business, data, systems, network and users secure. [LEARN MORE](https://www.themissinglink.com.au/cyber-security) [Cyber Security](https://www.themissinglink.com.au/cyber-security) - [ Managed Security Services ](https://www.themissinglink.com.au/managed-security-services) [Security Operations Centre](https://www.themissinglink.com.au/security-operations-centre) [Security Operations Maturity Assessment](https://www.themissinglink.com.au/security-operations-maturity-assessment) [Managed Detection and Response ](https://www.themissinglink.com.au/managed-detection-and-response) [Vulnerability Management as a Service](https://www.themissinglink.com.au/vulnerability-management-as-a-service) [Network Security](https://www.themissinglink.com.au/network-security) [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) [ASD Essential 8 as a Service](https://www.themissinglink.com.au/asd8-as-a-service) [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [ Specialised Security Services ](https://www.themissinglink.com.au/specialised-security-services) [Data Protection](https://www.themissinglink.com.au/data-protection-unit) [Cloud Security](https://www.themissinglink.com.au/cloud-security-services) [MITRE ATT&CK Coverage Assessment](https://www.themissinglink.com.au/mitre-attck) [Cyber Security Strategy](https://www.themissinglink.com.au/cyber-security-strategy) [Security Professional Services](https://www.themissinglink.com.au/security-professional-services) [Operational Technology Security ](https://www.themissinglink.com.au/operation-technology-security) [Application Security](https://www.themissinglink.com.au/application-security) [Security Controls Review](https://www.themissinglink.com.au/security-controls-review) - [ Governance, Risk and Compliance ](https://www.themissinglink.com.au/cyber-security-risk-and-compliance) - [ Offensive Security Services ](https://www.themissinglink.com.au/offensive-security) [Penetration Testing](https://www.themissinglink.com.au/penetration-testing) [Red Team Testing](https://www.themissinglink.com.au/red-team-testing) [CORIE Readiness](https://www.themissinglink.com.au/corie-readiness-red-team-testing) - [ Security Solutions ](https://www.themissinglink.com.au/security-solutions) [Workforce Security Assessment](https://www.themissinglink.com.au/spectra-alliance-assessment) [Identity](https://www.themissinglink.com.au/identity) [Endpoint](https://www.themissinglink.com.au/endpoint) [Network](https://www.themissinglink.com.au/network) [User Awareness](https://www.themissinglink.com.au/user-awareness) [Application](https://www.themissinglink.com.au/application) - [ Security Training ](https://www.themissinglink.com.au/security-training) [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) [Application Security Training](https://www.themissinglink.com.au/application-security-training) - IT & Cloud × Overview Our IT & Cloud solutions are designed to meet your current business requirements and be scalable into the future. [Learn More](https://www.themissinglink.com.au/it-cloud) [IT & Cloud](https://www.themissinglink.com.au/it-cloud) - [ Cloud ](https://www.themissinglink.com.au/cloud-services-solutions) [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) [Public Cloud](https://www.themissinglink.com.au/public-cloud) [Private Cloud](https://www.themissinglink.com.au/private-cloud) [Hybrid Cloud](https://www.themissinglink.com.au/hybrid-cloud) - [ Networking ](https://www.themissinglink.com.au/networking-services) [Unified Communications](https://www.themissinglink.com.au/unified-communications) [Video Conferencing](https://www.themissinglink.com.au/video-conferencing) [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) [Internet](https://www.themissinglink.com.au/internet) [Wireless Site Survey](https://www.themissinglink.com.au/wireless-site-survey) [Secure SD-WAN](https://www.themissinglink.com.au/secure-sd-wan) - [ Hardware & Software ](https://www.themissinglink.com.au/hardware-software) [End User](https://www.themissinglink.com.au/end-user) [Data Centre](https://www.themissinglink.com.au/data-centre) [Software](https://www.themissinglink.com.au/software) [Hyper-Converged Infrastructure](https://www.themissinglink.com.au/hyper-converged-infrastructure) - [ Backup & Recovery ](https://www.themissinglink.com.au/backup-recovery) [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) [Disaster Recovery](https://www.themissinglink.com.au/disaster-recovery) [Backup](https://www.themissinglink.com.au/backup) [Cloud Backup](https://www.themissinglink.com.au/cloud-backup) - [ Modern Workplace ](https://www.themissinglink.com.au/modern-workplace) [Microsoft 365](https://www.themissinglink.com.au/microsoft-365) [Remote Working](https://www.themissinglink.com.au/remote-working) [Sharepoint & OneDrive](https://www.themissinglink.com.au/sharepoint-onedrive) [Microsoft Teams ](https://www.themissinglink.com.au/microsoft-teams) [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) [Modern Devices](https://www.themissinglink.com.au/modern-devices) [Device Management](https://www.themissinglink.com.au/device-management) [Windows 365](https://www.themissinglink.com.au/windows-365) [Microsoft 365 Copilot](https://www.themissinglink.com.au/ai-automation-services/strategy-planning/m365-copilot-readiness-services) - [ Managed IT Services ](https://www.themissinglink.com.au/managed-it-services) [End User Management](https://www.themissinglink.com.au/end-user-management) [Infrastructure Management](https://www.themissinglink.com.au/infrastructure-management) [Service Desk](https://www.themissinglink.com.au/service-desk) [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) [IT Support](https://www.themissinglink.com.au/it-support) [Managed Networking](https://www.themissinglink.com.au/managed-network-services) - [ IT Consulting & Professional Services ](https://www.themissinglink.com.au/it-consulting-professional-services) [IT Strategy Review](https://www.themissinglink.com.au/it-strategy) [Technology Roadmap](https://www.themissinglink.com.au/technology-roadmap) - AI & Automation × Overview Transform the way you work with AI-powered solutions. [LEARN MORE](https://www.themissinglink.com.au/ai-automation-services) [AI & Automation](https://www.themissinglink.com.au/ai-automation-services) - [ AI Strategy & Planning ](https://www.themissinglink.com.au/ai-automation-services/strategy-planning) - [ AI Training & Adoption ](https://www.themissinglink.com.au/ai-automation-services/training-and-adoption) - [ AI-Powered Automation ](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation) - Our Company × Overview We aim to provide the technology that will help your business achieve its goals. [Learn More](https://www.themissinglink.com.au/our-story) [Our Company](https://www.themissinglink.com.au/our-story) - [ Our Story ](https://www.themissinglink.com.au/our-story) - [ Leadership Team ](https://www.themissinglink.com.au/leadership-team) - [ Our Culture ](https://www.themissinglink.com.au/our-inclusive-culture) - [ Our Partners ](https://www.themissinglink.com.au/our-partners) - [ Our Clients ](https://www.themissinglink.com.au/our-clients) - [ Our Awards ](https://www.themissinglink.com.au/our-awards) - [ Careers ](https://www.themissinglink.com.au/careers) - [ Well Connected Program ](https://www.themissinglink.com.au/well-connected) - Insights × Overview We take the time to understand your unique business needs and challenges.  Our certified specialists can work with you to find the best solution that suits you. [Learn More](https://www.themissinglink.com.au/contact-us) [Insights](https://www.themissinglink.com.au/news) - [ Blogs ](https://www.themissinglink.com.au/news) - [ Case Studies ](https://www.themissinglink.com.au/case-studies) - [ Security Advisories ](https://www.themissinglink.com.au/security-advisories) - [ Our Resources ](https://www.themissinglink.com.au/our-resources) - [ Our Podcasts ](https://www.themissinglink.com.au/our-podcasts) - [ Our Videos ](https://www.themissinglink.com.au/videos) - [Contact Us](https://www.themissinglink.com.au/contact-us) ![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ** - Cyber Security - [Managed Security Services](https://www.themissinglink.com.au/managed-security-services) - [Security Operations Centre](https://www.themissinglink.com.au/security-operations-centre) - [Security Operations Maturity Assessment](https://www.themissinglink.com.au/security-operations-maturity-assessment) - [Managed Detection and Response ](https://www.themissinglink.com.au/managed-detection-and-response) - [Vulnerability Management as a Service](https://www.themissinglink.com.au/vulnerability-management-as-a-service) - [Network Security](https://www.themissinglink.com.au/network-security) - [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) - [ASD Essential 8 as a Service](https://www.themissinglink.com.au/asd8-as-a-service) - [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [Specialised Security Services](https://www.themissinglink.com.au/specialised-security-services) - [Data Protection](https://www.themissinglink.com.au/data-protection-unit) - [Cloud Security](https://www.themissinglink.com.au/cloud-security-services) - [MITRE ATT&CK Coverage Assessment](https://www.themissinglink.com.au/mitre-attck) - [Cyber Security Strategy](https://www.themissinglink.com.au/cyber-security-strategy) - [Security Professional Services](https://www.themissinglink.com.au/security-professional-services) - [Operational Technology Security ](https://www.themissinglink.com.au/operation-technology-security) - [Application Security](https://www.themissinglink.com.au/application-security) - [Security Controls Review](https://www.themissinglink.com.au/security-controls-review) - [Governance, Risk and Compliance](https://www.themissinglink.com.au/cyber-security-risk-and-compliance) - [Offensive Security Services ](https://www.themissinglink.com.au/offensive-security) - [Penetration Testing](https://www.themissinglink.com.au/penetration-testing) - [Red Team Testing](https://www.themissinglink.com.au/red-team-testing) - [CORIE Readiness](https://www.themissinglink.com.au/corie-readiness-red-team-testing) - [Security Solutions](https://www.themissinglink.com.au/security-solutions) - [Workforce Security Assessment](https://www.themissinglink.com.au/spectra-alliance-assessment) - [Identity](https://www.themissinglink.com.au/identity) - [Endpoint](https://www.themissinglink.com.au/endpoint) - [Network](https://www.themissinglink.com.au/network) - [User Awareness](https://www.themissinglink.com.au/user-awareness) - [Application](https://www.themissinglink.com.au/application) - [Security Training ](https://www.themissinglink.com.au/security-training) - [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) - [Application Security Training](https://www.themissinglink.com.au/application-security-training) - IT & Cloud - [Cloud](https://www.themissinglink.com.au/cloud-services-solutions) - [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) - [Public Cloud](https://www.themissinglink.com.au/public-cloud) - [Private Cloud](https://www.themissinglink.com.au/private-cloud) - [Hybrid Cloud](https://www.themissinglink.com.au/hybrid-cloud) - [Networking](https://www.themissinglink.com.au/networking-services) - [Unified Communications](https://www.themissinglink.com.au/unified-communications) - [Video Conferencing](https://www.themissinglink.com.au/video-conferencing) - [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) - [Internet](https://www.themissinglink.com.au/internet) - [Wireless Site Survey](https://www.themissinglink.com.au/wireless-site-survey) - [Secure SD-WAN](https://www.themissinglink.com.au/secure-sd-wan) - [Hardware & Software](https://www.themissinglink.com.au/hardware-software) - [End User](https://www.themissinglink.com.au/end-user) - [Data Centre](https://www.themissinglink.com.au/data-centre) - [Software](https://www.themissinglink.com.au/software) - [Hyper-Converged Infrastructure](https://www.themissinglink.com.au/hyper-converged-infrastructure) - [Backup & Recovery](https://www.themissinglink.com.au/backup-recovery) - [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) - [Disaster Recovery](https://www.themissinglink.com.au/disaster-recovery) - [Backup](https://www.themissinglink.com.au/backup) - [Cloud Backup](https://www.themissinglink.com.au/cloud-backup) - [Modern Workplace](https://www.themissinglink.com.au/modern-workplace) - [Microsoft 365](https://www.themissinglink.com.au/microsoft-365) - [Remote Working](https://www.themissinglink.com.au/remote-working) - [Sharepoint & OneDrive](https://www.themissinglink.com.au/sharepoint-onedrive) - [Microsoft Teams ](https://www.themissinglink.com.au/microsoft-teams) - [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) - [Modern Devices](https://www.themissinglink.com.au/modern-devices) - [Device Management](https://www.themissinglink.com.au/device-management) - [Windows 365](https://www.themissinglink.com.au/windows-365) - [Microsoft 365 Copilot](https://www.themissinglink.com.au/ai-automation-services/strategy-planning/m365-copilot-readiness-services) - [Managed IT Services](https://www.themissinglink.com.au/managed-it-services) - [End User Management](https://www.themissinglink.com.au/end-user-management) - [Infrastructure Management](https://www.themissinglink.com.au/infrastructure-management) - [Service Desk](https://www.themissinglink.com.au/service-desk) - [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [IT Support](https://www.themissinglink.com.au/it-support) - [Managed Networking](https://www.themissinglink.com.au/managed-network-services) - [IT Consulting & Professional Services](https://www.themissinglink.com.au/it-consulting-professional-services) - [IT Strategy Review](https://www.themissinglink.com.au/it-strategy) - [Technology Roadmap](https://www.themissinglink.com.au/technology-roadmap) - AI & Automation - [AI Strategy & Planning](https://www.themissinglink.com.au/ai-automation-services/strategy-planning) - [AI Training & Adoption](https://www.themissinglink.com.au/ai-automation-services/training-and-adoption) - [AI-Powered Automation](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation) - Our Company - [Our Story](https://www.themissinglink.com.au/our-story) - [Leadership Team](https://www.themissinglink.com.au/leadership-team) - [Our Culture](https://www.themissinglink.com.au/our-inclusive-culture) - [Our Partners](https://www.themissinglink.com.au/our-partners) - [Our Clients](https://www.themissinglink.com.au/our-clients) - [Our Awards](https://www.themissinglink.com.au/our-awards) - [Careers](https://www.themissinglink.com.au/careers) - [Well Connected Program](https://www.themissinglink.com.au/well-connected) - Insights - [Blogs](https://www.themissinglink.com.au/news) - [Case Studies](https://www.themissinglink.com.au/case-studies) - [Security Advisories](https://www.themissinglink.com.au/security-advisories) - [Our Resources](https://www.themissinglink.com.au/our-resources) - [Our Podcasts ](https://www.themissinglink.com.au/our-podcasts) - [Our Videos](https://www.themissinglink.com.au/videos) [Contact Us](https://www.themissinglink.com.au/contact-us) [Cyber Security.](https://www.themissinglink.com.au/case-studies/tag/cyber-security) 8.04.21 # MedHealth Case Study by Scott Boyer - Security and Compliance Manager, MedHealth #### The Background [MedHealth ](https://www.medhealth.com.au/)supports thousands of people each year to achieve better work and health outcomes. With over 2,000 employees, we represent government and insurance organisations operating across Australia. Our programs aim to deliver the best possible health and employment outcomes for people with disability and mental health issues, people who have been injured or become ill in the workplace or due to a motor vehicle accident, Aboriginal and Torres Strait Islander Peoples, and people experiencing long term unemployment. The data we collect and manage on behalf of the people we support is personal and highly confidential. #### The Goal MedHealth grew via multiple acquisitions in 2018, bringing together a larger group of businesses. We identified the need to ensure a strategically aligned approach to security. We wanted to ensure three things: - That MedHealth were aligned when it comes to our approach to security and infrastructure across all divisions - That we were doing everything possible to minimise the risk of a data breach, and - That we would align with industry best practice and maintain and expand our ISO27001 certification. #### The Selection Process We had previously engaged The Missing Link for [Penetration Testing](https://www.themissinglink.com.au/penetration-testing) which was a great success, so it was a ‘no brainer’ to engage them to conduct a [Security Controls Review](https://www.themissinglink.com.au/security-controls-review) of our security domains and ensure alignment across MedHealth. #### The Relationship We asked The Missing Link to undertake a comprehensive review of our security infrastructure, including our physical assets, our people and processes, which fell into seven domains: 1. Our security framework 2. Our defensive network 3. Endpoint and application compliance 4. Authentication and access control 5. Event management 6. Data protection 7. Human firewall The Missing Link’s holistic approach involved analysing the security practices and tools we had in place, quantifying and measuring the value of our investments, and identifying areas needing further investment in time or money to reach a more mature security level. Their report provided strategies to strengthen our security infrastructure and practical advice on patching and managing the identified areas needing improvement. Together we’ve been able to review opportunities for data protection, including back-ups, the transfer of data to an off-site facility and contingency plans to ensure the business keeps running in the event of a real-life cyber-attack. We have discussed the importance of Firewalls, automating responses for event management and training our IT team and broader staff so that they are aware of the risks and know how to protect themselves and our company in the event of a cyber-attack. The Missing Link has also laid out a two-year roadmap that details the tools and processes that need to be implemented to strengthen our security posture. The roadmap includes regular penetration testing and vulnerability management that will identify areas in need of attention, so we always know what we need to prioritise. #### The Difference The Missing Link is proactive in their approach and genuinely interested in improving our security to ensure our success. As a result of this project, they’ve become a long-term security partner and IT advisor for our business. I appreciate their in-depth industry knowledge, their strategic views on security infrastructure, and the advice they’re able to offer on the pros and cons of procurement - I can also leverage their existing supplier relationships. I really feel like we’ve developed a partnership that is solid and reliable. From engaging with the sales team and project managers to working closely with the technical team, they’ve provided an end-to-end solution that has been genuinely effective. **Author** [Taylor Cheetham](https://www.themissinglink.com.au/news/author/taylor-cheetham) Campaign Manager share [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.themissinglink.com.au/case-studies/medhealth) [**](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.themissinglink.com.au%2Fcase-studies%2Fmedhealth) [**](https://www.twitter.com/share?url=https%3A%2F%2Fwww.themissinglink.com.au%2Fcase-studies%2Fmedhealth) ![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) - Featured Services - [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) - [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) - [Application Security ](https://www.themissinglink.com.au/application-security) - [RPA](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation/rpa-as-a-service) - [Managed Detection ](https://www.themissinglink.com.au/managed-detection-and-response) - [Managed IT ](https://www.themissinglink.com.au/managed-it-services) - [Cloud Security Services](https://www.themissinglink.com.au/cloud-security-services) - [Managed IT Security](https://www.themissinglink.com.au/managed-security-services) - [Managed IT Sydney](https://www.themissinglink.com.au/managed-it-services-sydney) - [Managed IT Melbourne](https://www.themissinglink.com.au/managed-it-services-melbourne) - Legal - [Terms & Conditions​](https://www.themissinglink.com.au/terms-and-conditions) - [Fair Use Policy](https://www.themissinglink.com.au/fair-use-policy) - [Terms of Use](https://www.themissinglink.com.au/terms-of-use) - [Privacy Policy](https://www.themissinglink.com.au/privacy-policy) - [Acceptable Usage Policy](https://www.themissinglink.com.au/acceptable-usage-policy) - [Cookie Policy](https://www.themissinglink.com.au/cookie-policy) - [Vulnerability Disclosure Policy](https://www.themissinglink.com.au/vulnerability-disclosure-policy) - More - [Contact Us ​](https://www.themissinglink.com.au/contact-us) - [Careers](https://www.themissinglink.com.au/careers) - [Government ​](https://www.themissinglink.com.au/government) - [Sitemap ](https://www.themissinglink.com.au/our-sitemap) ##### Acknowledgement of Country The Missing Link acknowledges the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging. We celebrate the stories, culture and traditions of Aboriginal and Torres Strait Islanders of all communities who also work and live on this land. ** ```json { "@context" : "https://schema.org/", "@type" : "WebSite", "name" : "The Missing Link", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.themissinglink.com.au/results{search_term_string}" }, "url" : "https://www.themissinglink.com.au/" } ``` ```json { "@context" : "https://schema.org", "@type" : "Organization", "logo" : "https://www.themissinglink.com.au/hubfs/svgs/TML_Logo-Aust-UK.svg", "name" : "The Missing Link", "sameAs" : "https://www.linkedin.com/company/the-missing-link-pty-ltd/", "url" : "https://www.themissinglink.com.au/" } ```