From an IT blind spot to a managed platform built for growth.
How Arkay Windows gained control of its IT costs, strengthened security, modernised its infrastructure and absorbed an acquired business into the same managed environment.
Building an IT platform around a growing UK manufacturing business.
Established in 1975, Arkay Windows has grown from a small aluminium fabricator in North West London into one of the UK's leading manufacturers of aluminium windows, doors and roof systems.
When Fifosys first engaged with the business in 2022, Arkay employed around 75 people across its head office and factory sites in Watford, alongside a warehouse location in Wood Green.
IT had historically been supported by a single-person provider. With a new CFO joining the business, Arkay needed a much clearer understanding of its technology estate, its exposure to risk and what IT was actually costing the organisation.
Since then, Arkay has grown to more than 150 staff across three production sites. The IT environment has developed alongside it, including the acquisition and integration of Quantum Windows in Corby.
Limited visibility, ageing infrastructure and too much reliance on a single point of support.
Arkay's new CFO inherited an environment where the business couldn't clearly see what IT was costing, how its systems fitted together or where its biggest risks sat.
No reliable IT visibility
There was little reporting, almost no system documentation and no consolidated view of application requests, failures, configurations or technology costs.
A single point of failure
One provider was supporting around 75 employees alongside bespoke and industry-specific applications, creating bottlenecks around response, resolution and routine changes.
Significant security exposure
The audit found no MFA protecting Microsoft 365 or administrator accounts, local-only user authentication, default network switch credentials and employee credentials already appearing on the dark web.
Fragmented infrastructure
Arkay's two Watford sites were linked by a VPN connection operating at as little as 20Mbps, while servers, backups and file services were spread across multiple hosts and ageing machines remained in use.
Backup and resilience gaps
Microsoft 365 data wasn't backed up, server protection was fragmented and several devices were still running end-of-life versions of Windows.
Licensing and acquisition pressure
Arkay lacked a clear Microsoft licensing record and then acquired Quantum Windows in Corby midway through the engagement, creating a new environment that needed to be brought under managed support quickly.
Start with visibility, establish the risks and give the business a clear route forward.
Fifosys began with a detailed on-site audit of Arkay's Watford and Wood Green estate in April 2022. Rather than treating individual problems in isolation, the audit established the condition of the wider environment and created a prioritised remediation roadmap.
Arkay subsequently moved onto a fully managed service in November 2022, using a price-per-user model that gave the CFO a predictable technology cost base for the first time.
Evidence before recommendations
The engagement started with a proper audit, giving Arkay a documented view of its infrastructure, security gaps and priority risks.
Predictable commercial model
Price-per-user support gave the CFO a clear operating cost that could scale alongside staffing levels and future acquisitions.
A roadmap rather than another quick fix
Security, licensing, connectivity, servers and backup were addressed systematically against an agreed risk register.
Remediate the immediate risks, consolidate the platform and make it capable of supporting growth.
Fifosys worked through the original audit findings while adapting the roadmap as Arkay's requirements changed.
Audit and prioritise
Review the Watford and Wood Green estate, identify the most urgent operational and security risks, and establish a formal remediation roadmap.
Move to fully managed support
Replace the single-person support dependency with a managed service desk and a predictable per-user commercial model.
Strengthen identity and endpoint security
Introduce MFA, endpoint detection and response, enhanced email filtering and dark web monitoring across Arkay's environment.
Modernise infrastructure and backup
Deploy supported server hardware, replace firewalls, improve inter-site connectivity and introduce Datto server backup and disaster recovery alongside dedicated Microsoft 365 backup.
Resolve Microsoft licensing exposure
Establish the licensing requirement, procure the correct Microsoft licences and CALs, and remove the risk associated with a potential software asset management audit.
Bring Quantum Windows into the platform
Onboard the newly acquired Corby operation within weeks, connect the sites and consolidate the Arkay and Quantum Microsoft 365 tenancies into one environment.
Keep risk visible
Introduce a formal risk register reviewed quarterly with Arkay's leadership so security and technology priorities remain visible at management level.
A clearer, more secure IT environment that has kept pace with the business.
Arkay has moved from reactive IT with limited visibility to a documented and managed platform with predictable costs, stronger controls and capacity for further growth.
IT spend is predictable
The CFO now has visibility across connectivity, Microsoft licensing, infrastructure, desktop services and the network rather than dealing with unplanned reactive spend.
Security exposure is actively managed
Dark web monitoring identified 133 credential compromises against Arkay's domains in the last 12 months, including exposed passwords, allowing them to be tracked and remediated rather than remaining hidden.
The infrastructure has been consolidated
Watford and Corby now operate on a more consistent and properly secured platform, supported by modern servers, managed firewalls, inter-site connectivity and structured backup.
Microsoft licensing risk has been removed
Licensing and CAL requirements were corrected alongside the server refresh, removing the exposure associated with an incomplete Microsoft licensing position.
The acquisition model proved scalable
Quantum Windows was brought into managed support within weeks and its technology costs could be factored into the acquisition using Arkay's existing price-per-user model.
The platform is ready for the next stage
With the underlying environment in a stronger position, Arkay and Fifosys are now exploring how AI and automation could streamline operational processes across the business.
From limited visibility and reactive support to a technology platform capable of supporting acquisition, stronger security and continued growth.
How much confidence do you have in what your IT is costing and where your biggest risks sit?
Start with the environment you have today. We can help you understand what's working, where the exposure sits and what should be prioritised next.
Talk to Fifosys
Tell us where you need greater visibility, stronger support or a clearer roadmap for your IT environment.
Managed IT
See how Fifosys manages support, infrastructure, security and technology planning as one joined-up service.