Case study · Dunbell Investment Group

Twelve years of IT for a regulated Lagos capital-market group

We have run this group’s domains, email and websites since 2014. In late 2025 we added day-to-day IT oversight: a coded register of 69 items, two-step sign-in on staff email, equipment checks, buying advice and licences. Management now gets a written IT report every month.

Talk to us

Dunbell Investment GroupA Lagos capital-market group
2014 to todayWhen
Run, AdvisoryServices

69items on one coded equipment register, in 10 categories

Equipment register, by category

Laptops38
Printers7
Routers6
Scanners3
Backup power3
Other12

The situation

The group has four companies under one parent, including a stockbroker and an insurance broker.

Its regulator expects security tests twice a year, and its auditors ask for proof of what it owns and how IT is controlled.

In 2025 there was no list of the group’s equipment, staff email was protected by passwords alone and nobody reported on IT to management each month.

What we did

Run

Know every device

You cannot look after, insure or audit what you have not counted. A coded register answers the auditors’ first question in one place.

Built a register of 69 items in 10 categories: laptops, desktops and the server, printers, scanners, routers, backup power units, monitors and accessories.
Gave each item its own code, its user and its status.
Checked the charger, Windows version and disk security settings on every laptop.
Put a remote-support tool on all 38 laptops. Most problems can now be fixed without a visit.

Run

Protect staff email and keep licences right

A stolen password is the easiest way into a company’s email. Two-step sign-in also asks for a code from the user’s phone.

Moved staff email to Zoho for 33 users in 2023.
Turned on two-step sign-in within a week. Today 32 of 40 mailboxes use it.
Set up and closed mailboxes as staff joined and left.
Kept paid licences in line with real staff. At the 2026 renewal we cut them from 36 to 31, then added 5 for new hires.

Run

Buy the right equipment

A bad purchase costs money twice: once to buy it and once to replace it.

Set a minimum standard for new laptops.
Tested 6 “new” laptops on delivery. They had up to 9,603 hours of past use, and the supplier took them back.
Set up 9 replacement laptops, a printer and a scanner the following month.
Advised on backup power, conference equipment and an internet plan that stopped data running out each month.

Run

Keep everything running

Small faults turn into lost days if nobody checks.

Check laptops every three months. The first round checked 23 laptops and found 2 faults.
Arranged repairs for laptops, printers and a desktop, and returned one laptop under warranty.
Worked with the trading software’s supplier to move it to a new server.
Trained staff on laptop care, email and protecting data.

Run

Work through each security test with the auditors

The regulator expects an outside security test twice a year. The test only helps if every finding is understood, fixed and reported back in time for the auditors.

Review each twice-yearly security test report with the group’s auditors and the outside testers, every cycle since 2021.
Agree what each finding means for the group’s websites and systems, and which fixes come first.
Fix the website and system issues each test raises.
Send a written list of what was fixed, for the auditors’ file.

Advisory

Report and plan

Managers decide better when IT is written down every month and next year’s spending is planned.

Sent a written IT report to management every month from October 2025.
Wrote IT budgets for 2026 and 2027.
Filled in the IT part of the auditors’ internal-control questionnaire.
Costed a move to paperless forms and one finance system for all four companies. This is a proposal the group has not yet adopted.

Results

69 items in 10 categories on one coded register.
32 of 40 staff mailboxes on two-step sign-in.
6 used laptops sold as new were caught on delivery and sent back.
A written IT report to management every month for 12 months.
More than ten twice-yearly security tests worked through with the auditors since 2021, each with fixes reported back.
Email licences matched to real staff at every renewal.

More case studies

See all case studies

Want the same for your business?

Tell us what you run today and what needs to change. You get a clear next step and a fixed price before we start.

Talk to us

Or WhatsApp us

Monday to Friday, 9am to 6pm. We reply within one business day.