Case study · Data protection
Strengthening file and hardware security posture
Proactive improvements to backup, access control and hardware safety gave Fagor's team confidence their data was protected against loss and compromise.
Client & industry overview
Fagor operates in manufacturing, where day-to-day work depends on file servers, shared drives and physical hardware spread across sites — engineering drawings, production records and operational data that the business genuinely cannot afford to lose. Much of that data had grown organically over years, without a single consistent policy governing how it was backed up, who could access it, or how the hardware holding it was secured.
Data protection challenges
Backups existed, but nobody could confidently answer how recent they were, whether they'd actually restore cleanly, or whether they covered everything that mattered. Access to shared drives had accumulated over years of role changes without ever being reviewed, and several devices holding sensitive files had no device-level encryption at all.
- Backup coverage and restore reliability had never been formally tested
- Broad, unreviewed access to shared drives and file servers
- Unencrypted hardware holding sensitive operational data
Compliance & privacy requirements
Beyond internal risk, Fagor needed to demonstrate reasonable data protection practices to customers and partners increasingly asking about it — and to align with the direction of India's Digital Personal Data Protection Act as it becomes enforceable. That meant moving from informal habits to documented, repeatable policy.
Risk assessment
Ciqur24 began with a full inventory of where sensitive data actually lived, how it was backed up, who could reach it, and which hardware carried the highest exposure. The assessment prioritised findings by realistic business impact — a single point of backup failure ranked well above a low-traffic shared folder with excess permissions, for example — so remediation effort went where it mattered most first.
Our approach
Data protection strategy
Three pillars, rolled out in sequence over six weeks.
Verified backup & recovery
Consolidated backup coverage across all critical systems, with scheduled restore testing so "we have a backup" became "we've confirmed it restores."
Least-privilege access control
Rebuilt shared-drive and file-server permissions around role-based, least-privilege access, with a defined process for granting and reviewing it going forward.
Hardware & device safety
Rolled out device-level encryption and physical safeguards across hardware holding sensitive data, closing the gap between digital and physical security.
Outcomes
Privacy & compliance improvements
Documented policy
Backup, access and device-security policy written down and repeatable — not tribal knowledge.
DPDP-aligned practices
Data-handling practices brought in line with the direction of India's DPDP Act.
Audit-ready evidence
A documented posture Fagor can now demonstrate to customers and partners on request.
Results
What changed
Verified, restorable backups
Every critical system now covered by backups that are actually tested, not assumed to work.
Right-sized access
Access reviewed and rebuilt around least privilege, with a process to keep it that way.
Encrypted, secured hardware
Devices holding sensitive data now carry device-level encryption as standard.
Confidence, not guesswork
The team now has documented confidence their data is protected — not just a hope that it is.
Final business impact
Fagor moved from informal, undocumented data-handling habits to a verified, repeatable data protection posture — without disrupting day-to-day operations during rollout. Backup failures and unreviewed access are no longer silent risks sitting in the background, and the business now has documented evidence of its practices ready for the next customer, partner or regulatory conversation.
Get started
Is your data actually protected?
Get a data protection review covering backup, access control and hardware safety — built around what your business actually holds.