Case Studies

Challenge: Stand up an accredited secure environment for defence research, covering Cyber Essentials Plus, ISO 27001 and ISO 9001 management systems and the controls expected by MOD prime contractors and the Defence Cyber Protection Partnership, without adding load to a small research and IT team.

Solution: ORCA Opti delivered a managed secure environment end to end: Cyber Essentials Plus aligned controls deployed and tested automatically, SOPs and policies aligned to MOD and DCPP expectations, and ISO 9001 and ISO 27001 management systems at the core. Controls and evidence were assembled inside ORCA, ready for MOD supplier assessment, with very little load on the customer's research and IT teams.

Challenge: A cybersecurity consulting practice working with central and local government needed ISO 9001 and ISO 27001 to be procurement-ready, plus a safe way for the team to use AI when drafting tenders and proposals without sending sensitive customer information into frontier models or being exposed to prompt injection.

Solution: ORCA Opti stood up ISO 9001 and ISO 27001 management systems alongside Cyber Essentials Plus aligned controls in three weeks, with incident management and automated resolution workflows running from day one. AI Guardian provided a sovereign, protected AI environment so the team could write tenders and business proposals confidently, with customer data kept out of frontier models and prompts shielded from injection and other attacks.

Challenge: A small clinical trials site, with a team of 7 specialists and 4 coordinators running multiple concurrent trials, was losing 1 to 2 hours per person per day searching protocols, pharmacy manuals and regulatory documents to answer patient and procedural questions.

Solution: ORCA Opti deployed Opti Assist inside the site's own Microsoft 365 tenant, securely indexing every active trial's documentation. Coordinators and clinicians ask natural-language questions and get instant, source-cited answers, with no patient data or trial documents leaving the tenant. Human-in-the-loop validation and ISO/IEC 42001-aligned governance are built in.