Back to Case Studies
Infrastructure

Infrastructure Revitalisation & Expansion

As Infrastructure Support Lead for Kent Wildlife Trust, Brian unified a fragmented four-site estate into a modernised, scalable architecture, delivering the organisation's foundational Disaster Recovery and Business Continuity posture.

Client: Kent Wildlife Trust
Duration: 5 Years
Delivered: 2010-01-01
Role: Infrastructure Support Lead

The Challenge

As the Infrastructure Support Lead engaged by Kent Wildlife Trust, Brian inherited a fragmented IT environment that had fundamentally failed to keep pace with the conservation charity's growth. The Trust was expanding its headcount and moving into new sites amidst escalating regulatory expectations, yet systems remained dangerously isolated across four geographically dispersed locations.

The organisation lacked a structured approach to security, patching, or business continuity, making enterprise-grade modernisation an immediate priority. A dedicated technical authority was required—one who could think strategically, execute operationally, and earn Trustee-level confidence to drive sweeping infrastructure changes independently.

  • No centralised server management existed; each of the four separate sites operated in complete isolation with wildly inconsistent configuration standards.
  • Disaster Recovery (DR) and Business Continuity (BC) capabilities were entirely absent, leaving the Trust highly vulnerable to extended outages.
  • Unstructured, unsecured remote access provided staff with off-site connectivity but offered zero endpoint integration or policy enforcement.
  • Critical membership and accounting databases operated without formal governance, holding sensitive data without documented recovery procedures.
  • Uncoordinated vendor relationships resulted in reactive contract management, obscured budgets, and a lack of strategic alignment.
  • A looming communications room relocation into a 16th-century heritage farmhouse introduced severe physical, logistical, and architectural complexity to an already strained infrastructure foundation.

The Approach

The operational strategy broke the five-year programme into three interlocking workstreams: infrastructure modernisation, security and resilience, and operational governance. Securing Trustee-level authority early in the engagement proved crucial, enabling rapid infrastructure investment decisions without bureaucratic delay.

Workstream 1 — Multi-Site Infrastructure Modernisation

A sweeping modernisation effort brought the entire server lifecycle under unified standards. From builds and configuration to patching and decommissioning, the four geographically separate sites transitioned into a single, cohesive estate. VMware virtualisation aggressively consolidated physical infrastructure, dramatically improving resilience while reducing hardware overhead.

Active Directory, DNS, and Group Policy (GPO) formed the new identity and policy backbone. This structural shift enforced consistent access controls regardless of a user's physical location. Multi-site network connectivity also reached standardisation, providing the Trust with a unified networking foundation capable of supporting seamless regional expansion.

Concurrently, meticulous logistical planning ensured the communications room relocation into the 16th-century farmhouse executed flawlessly. Services, hardware, and new equipment transitioned seamlessly into the Grade-listed environment without triggering any operational disruption.

Workstream 2 — Security & Resilience

Operating with sole responsibility for network integrity across the entire estate, navigating this tier required deep technical competency paired with the absolute trust of senior leadership. Fortinet remote access solutions deployed alongside endpoint security controls, enabling staff to work securely off-site for the first time while strictly enforcing corporate policy.

Crucially, the Trust's first formal Disaster Recovery and Business Continuity plans moved from concept to reality. Rigorous testing transitioned the organisation from an unprotected state to a structured, rehearsed recovery posture. Data backup compliance also fell under strict governance, formalising schedules, verification checks, and secure off-site storage. Furthermore, a coordinated patch management pipeline closed known vulnerabilities and maintained a hardened baseline across the entire multi-site network.

Workstream 3 — Operational Governance & Continuity

A comprehensive suite of bespoke policies and procedures codified the operational baseline. This documentation spanned infrastructure management, access control frameworks, vendor engagement rules, and staff transition protocols, preserving critical institutional knowledge.

Strategic oversight absorbed IT budgeting and vendor negotiations, actively realigning service delivery to organizational needs rather than supplier convenience. Continuous, error-free administration of the SQL-based Membership and Accounts databases ensured monthly BACS and payroll processing executed flawlessly over the five-year term. Finally, technical contributions to the Trust’s website rebrand guaranteed the digital presence accurately reflected the organisation's growing maturity.

KWT Network Architecture Redesign

Programme Metrics

MetricBaselineAt Handover
Unified Infrastructure0 of 4 Sites4 of 4 Sites Unified (VMware/AD)
Formal DR / BC PlansNoneDesigned & Tested
Secure Remote AccessNoneFull Estate (Fortinet)
Policy & DocumentationNoneFull Suite Authored
Vendor ContractsReactive / Ad HocStructured & Negotiated
Heritage Comms RelocationPlanned RiskDelivered — Zero Disruption

The Results

  • A deeply siloed four-site infrastructure collapsed into a single, consistently managed estate, offering the Trust a stable platform built to sustain long-term business growth without requiring immediate re-architecture.
  • Disaster recovery capabilities established from absolute zero transitioned the charity into a formally documented, resilient operational state capable of surviving catastrophic failure.
  • Trustee-level confidence held strong across a five-year timeline, ensuring all infrastructure investments intrinsically aligned with regulatory obligations and the Trust's long-term strategy.
  • The physical communications room relocation into a 16th-century farmhouse succeeded flawlessly, demonstrating an agile ability to execute severe infrastructure modifications within highly constrained, sensitive physical environments.
  • The meticulous authorship of policies, runbooks, and operational documentation permanently preserved institutional capability, safeguarding operational continuity beyond any single engineer's tenure.
  • Active, unyielding database governance guaranteed five continuous years of flawless BACS and payroll processing.

Business & Security Impact

  • Establishing the Trust's very first Disaster Recovery plan decisively mitigated catastrophic data-loss risk against membership applications and critical financial records. Industry benchmarks highlight the severity of this gap: while 93% of IT leaders fear unplanned downtime, only 20% of organizations possess formally prepared DR capabilities. Among unprepared mid-size entities, attempting to recover critical data manually frequently stretches costly outages into days or weeks.
  • By establishing tested resilience controls, the engagement secured Kent Wildlife Trust's foundational operations from severe environmental or cyber disruption, ensuring their vital conservation work experienced zero threat from technological gaps.

Operating with exceptional autonomy, Brian repeatedly validated his ability to architect enterprise-grade infrastructure inside growing organizations, translating unstructured complexity into secure, highly governed production reality.

Kent Wildlife Trust logo
ACCOR HOTELS logo
KURT GEIGER logo
Kobalt Music logo
INEOS Oil & Gas logo
Sizewell C logo
Northern Powergrid logo
Brian Stephens

© 2026 Brian Stephens. All rights reserved.

Privacy Policy