-
Client
Altius Group
-
Industry
Professional Services
-
State
NSW
Altius Group
Altius Group is Australia’s leading integrated workplace health and wellbeing provider. They play a critical role in making people, communities, and workplaces healthier, safer, and more productive.
As a scaled and growing business in the heavily regulated allied healthcare industry, Altius has a diverse set of stakeholders to support through their technology operations as businesses and new service lines are integrated into the Group, all while ensuring sensitive health data and PII is protected.
In early 2025, an internal assessment of the Group’s technology capabilities in concert with the business’s three-year strategy suggested it was time to formally review their technology posture with a third party.
“It became clear that now was the time to make a step-change in our capability to support our growth,” says Nick Park, General Manager, Digital and Technology at Altius. “We doubled in size over four years through a combination of organic growth and acquisitions. We’d also developed a roadmap of our ambitions through our ISO 27001 process that laid out the progress we wanted to achieve by our early 2026 ISO audit”.
Beyond integrating disparate systems within their Microsoft suite, Altius’s plan included simplifying device management, hardening and streamlining user identities, introducing cyber security analytics, and ultimately launching a 24/7 cyber security operations centre — all by early 2026.
“We have never wanted to just have ISO 27001 as a logo for our website,” says Park. “We wanted it to be foundationally delivering value to our organisation and those we serve, improving how we operate, and providing a framework for change management.”
With their ambitions and insights in hand, and with their next ISO audit coming up in March 2026, Altius recognised the need for a partner who could help optimise internal systems while also supporting the company’s strategic modernisation goals — all on a timeline and to a budget.
Challenges
Park connected with Quorum in early 2025 and was immediately impressed with the team’s capabilities, working style, and proposed approach. “The more my initial conversations panned out with them, the more I realised that what I was actually looking for wasn’t just a capability, it was an attitude,” says Park. “We needed to bring not just resourcing, and not just projects, but we needed to be doing it in a way that was highly compatible with the mindset that we had internally.”
These conversations led Altius to engage Quorum for an initial assessment of their systems, based upon Quorum’s proprietary Minimum Standards — a series of vendor-neutral environmental controls that reference industry standards and best-practice methodologies and are applicable to all organisations, regardless of their industry, size, scale or complexity. Quorum’s Minimum Standards encompass infrastructure, identity, security, networks, backups, and disaster recovery — amongst other areas.
Quorum’s assessment revealed that while Altius’s technology environment met ISO compliance requirements, there was a clear opportunity to further enhance governance, strengthen security controls, and embed best-practice management across the environment — needs that aligned well with Altius’s internal goals.
These findings led to the development of a customised Risk Matrix & Roadmap that could serve as a guidebook for Altius’s future growth, whilst also giving Altius exposure to Quorum’s process-driven approach and project management capability. The work proposed by Quorum’s Roadmap was aligned to Altius’s budget and was effectively cost-neutral, due to the savings achieved by streamlining systems and improving partner efficiency.
Demonstrable Success
With Quorum’s support, Altius successfully completed their ISO audit and the launch of their cyber security operations centre through Quorum’s Cyber One program — a leading, Microsoft-endorsed managed detection and response service.
Improvements made to Altius’s security infrastructure resulted in a Microsoft Secure Score nearly double the market average. Quorum’s platform managed service includes biannual updates to client Risk Matrices & Roadmaps and these efforts have already identified future opportunities for security remediation projects at Altius which formed part of the Group’s FY27 planning.
Ultimately, support for these ongoing efforts reflects the trust that has been built between Altius and Quorum. “This is a true partnership,” says Park. “I know people throw that phrase about, but this is one of the best professional partnerships I could imagine having, especially in this industry.”
This partnership extends beyond project delivery, as Quorum continues to support Altius through its Managed Service team who provide monthly reviews, Microsoft licensing strategy guidance, and flexible resourcing during internal team transitions.
When additional needs have emerged, Quorum has also connected Altius with specialist partners, including their peers across the Cloud Collective, a new virtual compliance partner ISO 365 for “compliance-as-a-service” support, and Parabellum — a new penetration testing partner that delivered a 10X improvement over Altius’s incumbent provider.
For Park, this ecosystem of support has fundamentally changed the way Altius approaches technology transformation and operations.
“I have this picture in my head of a wall with coat hooks on it, and those coat hooks have capes hanging off them — just like superheroes wear,” he says. “One of those capes is orange and has the Quorum logo on it. They join our core partnerships in digital software and data strategy, when needed. Our ‘capes’ give us superpowers we otherwise wouldn’t have.”
“Anytime we need to do anything complicated, we don’t need to worry about it anymore. We put on the Quorum cape, and we’re invincible.”
Results
Following the completion of this initial assessment, Altius partnered with Quorum to budget and plan the projects detailed in the roadmap that would strengthen Altius’s foundation for future audit and cybersecurity work. Key early-stage projects included:
- Microsoft Intune deployment, application packaging, and Windows 11 upgrades to standardise endpoint management and support automated future deployments
- Microsoft Defender rollout across endpoints, identities, and servers to strengthen threat visibility and reduce reliance on third-party point solutions
- Microsoft E3 + E5 Security licensing optimisation to unlock additional Microsoft security capabilities and improve return on investment
- Identity hardening initiatives with Microsoft Entra ID that strengthened access controls and governance to reduce risk and support ongoing compliance objectives
In total, Quorum completed six major projects with Altius between July 2025 and March 2026. “I can’t tell you that that pace of change is something I’ve ever seen before,” states Park.
All of these projects were delivered with a focus on end user experience, a major priority for Altius. According to Park, “My perspective is that everything should be consumer grade, that we should be delivering things that don’t require training, that don’t require onboarding, and that to the greatest extent possible, just work.”
