How Mead & Hunt Strengthened Cyber Resilience with a True Security Partner

Reading Time: 30 minutes

A national architecture, engineering, planning, and construction services firm scales cybersecurity maturity across a distributed organization.

Client

Mead & Hunt, a national architecture, engineering, planning, and construction services firm

Challenge

Scaling cybersecurity across a growing, distributed organization while protecting client data, intellectual property, and federal-work requirements

Solution

Collaborative partnership for managed cybersecurity, consulting, training, and compliance help

Results

Stronger cyber resilience, board-ready visibility, improved security maturity, CMMC-aligned progress, and a trusted extension of the IT team 

About Mead & Hunt

Mead & Hunt is an architecture, engineering, planning, and construction services firm serving markets nationwide. The firm has evolved dramatically over the course of CIO Andy Knauf’s career. When Andy joined Mead & Hunt in 1990 as the company’s first IT hire, the organization had one office, roughly 82 employees, and only a handful of computers. Today, Mead & Hunt operates as a national firm with a distributed office footprint and a technology environment built to support complex, high-trust work. 

That growth has required more than everyday IT support. As Mead & Hunt expanded, the firm needed technology systems that could keep people productive, support collaboration across offices, protect sensitive project data, and meet the increasing expectations of clients and federal agencies. Cybersecurity became a central part of that mission.

Mead & Hunt case study

The Challenge:

Scaling Cybersecurity for a Distributed, High-Trust Firm

For Mead & Hunt, cybersecurity is not only about preventing ransomware. It is about protecting the intellectual property, project data, and client trust at the center of the firm’s work. As Andy explained in the podcast conversation, many peer organizations have experienced ransomware attacks or serious security events. Mead & Hunt wanted to stay ahead of those risks rather than react after an incident. 

The question was how to do that effectively. Hiring a single internal security leader would have provided valuable expertise, but it would not have delivered around-the-clock coverage. Cyber threats do not happen only between 8 a.m. and 5 p.m., and Mead & Hunt needed a model that could provide consistent monitoring, strategic guidance, and depth of expertise without forcing the internal IT team to build a full security operations center from scratch. 

At the same time, the firm’s industry was facing rising compliance expectations. For organizations performing federal or Department of Defense work, CMMC and related NIST requirements make cybersecurity controls increasingly important. Mead & Hunt needed a security program that could support resilience, client confidence, and the ability to prove that the right protections were in place. 

The Solution:

24/7 MDR Backed by Education, Strategy, and Partnership

Mead & Hunt partnered with Corsica Technologies to strengthen its cybersecurity program through managed detection and response, ongoing security reviews, and practical guidance across the Microsoft security stack. The relationship began in 2021 and has continued ever since. 

What made the partnership different was not only the technology but the education and strategic collaboration that came with it. 

“Partnering with Corsica Technologies was honestly one of the better decisions that we ever made. It wasn’t only the thing that got put in place; it was also the education that went on top of it.”

Andy Knauf, Chief Information Officer, Mead & Hunt

Corsica worked with Mead & Hunt as an extension of the company’s IT team, helping the firm understand not just what needed to change, but why those changes mattered. Regular MDR reviews gave Mead & Hunt visibility into trends, incidents, and risk patterns. These reports helped Andy make decisions, brief leadership, and identify where additional education or control improvements were needed. 

The partnership supported progress across several security priorities, including:

Security Priority 

How Corsica Helped 

24/7 security visibility 

Provided around-the-clock MDR coverage and alert review beyond what a single internal hire could realistically deliver. 

Leadership reporting 

Delivered reports and trend data that helped Mead & Hunt brief executives and board-level stakeholders on cyber risk. 

Zero trust adoption 

Guided Mead & Hunt through zero trust implementation across desktops and mobile devices, including difficult change-management conversations. 

Endpoint and mobile protection 

Helped strengthen protection across devices using Microsoft-aligned controls, Intune, and endpoint security practices. 

Phishing and user education 

Used MDR trends and reporting insights to inform education efforts and break risky user habits. 

CMMC-aligned maturity 

Supported the controls, visibility, and documentation mindset required as federal-work cybersecurity expectations continue to mature. 

Corsica’s role was especially valuable when security improvements required employee adoption. Zero trust on mobile devices, for example, created user concerns because many employees used personal phones. Corsica helped reinforce the importance of extending protection across the full environment, not just the easiest endpoints to secure. 

Results:

Visibility, Resilience, and a Partnership That Goes Beyond Monitoring

Long-Term Partnership

Going strong since 2021 

24/7/365

Continuous MDR coverage and security support

65 Offices

A distributed firm protected across a national footprint

1 Partner

Corsica operates as a true extension of Mead & Hunt’s IT team

The Corsica partnership has helped Mead & Hunt mature its cybersecurity program while giving the internal IT team better visibility, better reporting, and stronger confidence in its defenses. Here’s what those results look like in detail.  

  • Continuous security improvement: Rather than treating MDR as a tool that gets installed and left alone, Mead & Hunt uses Corsica’s reviews and recommendations as part of an ongoing improvement rhythm. 
  • Improved executive visibility: MDR reports give Mead & Hunt a clear view into what is happening in the environment, what trends are emerging, and where the organization should focus next. This visibility helps Andy communicate cyber risk to board members and other leaders in practical business terms. 
  • Stronger security maturity: Corsica’s recommendations helped Mead & Hunt continue advancing zero trust, endpoint protection, mobile-device controls, phishing education, and Microsoft security capabilities. The relationship has helped the firm close gaps that could otherwise create risk across a distributed organization. 
  • Better support for compliance-driven work: Mead & Hunt’s clients increasingly expect evidence that sensitive work and data are protected. Corsica’s guidance, reporting, and control recommendations support the firm’s ability to respond to those expectations with confidence. 
  • A true partnership model: Andy repeatedly described Corsica as a partner rather than a vendor. That distinction matters. Corsica does not simply sell security services; the team works alongside Mead & Hunt to understand risk, communicate priorities, and maintain forward momentum. 

One story captured that partnership clearly. While Andy was vacationing in the Grand Caymans, Corsica detected unusual login activity associated with his account. Instead of treating the alert as a routine technical event, the team called Andy to make sure he was safe and that his device had not been stolen. The alert turned out to be explainable, but the response showed Andy that Corsica was watching out for more than systems. 

I got a phone call asking if I was okay—if my family was okay. That was the cherry on top of everything else that we had.

—Andy Knauf, Chief Information Officer, Mead & Hunt

The Future:

Cyber Resilience as a Foundation for Practical Innovation

Mead & Hunt has always moved forward with technology. The firm adopted CAD early, built cloud capabilities before remote work became common, and continues to explore practical uses for AI and automation. For Andy, the goal is not to chase trends for their own sake, but to use technology to help the organization do more, respond faster, and remain resilient. 

That same mindset applies to cybersecurity. Resilience is not one project, one platform, or one audit. It is an ongoing practice that combines technology, visibility, education, process, and trust. As Mead & Hunt continues to grow, serve clients, and navigate evolving cybersecurity and compliance expectations, Corsica remains a strategic partner in helping the firm keep moving securely. 

For Mead & Hunt, that partnership has become a standard for what technology relationships should look like: collaborative, informed, proactive, and invested in the client’s success. 

I’ve never called you a vendor. You’re a partner.

—Andy Knauf, Chief Information Officer, Mead & Hunt

Ready to solve your IT challenges?

Fill out the form, and a specialist will contact you within 1 business day to discuss your needs.

We look forward to connecting!

  • 30+ years in business
  • 300+ certifications
  • 1,000+ clients

Cybersecurity | Managed IT | Digital Transformation

Related Case Studies

Mead & Hunt case study
Case Study
Breanna Brown

How Mead & Hunt Strengthened Cyber Resilience with a True Security Partner

A national architecture, engineering, planning, and construction services firm scales cybersecurity maturity across a distributed organization. Client Mead & Hunt, a national architecture, engineering, planning, and construction services firm Challenge Scaling cybersecurity across a growing, distributed organization while protecting client

Read More
OT security in food manufacturing - case study
IoT Security
Breanna Brown

Case Study: OT Security in the Food Manufacturing Industry

How A Leading Food Manufacturer Safeguarded 16,000+ OT Devices with an IoT Security Assessment Client Leading food manufacturer Challenge Lack of comprehensive OT security across 30+ global sites Solution Microsoft Defender for IoT proof of concept providing proactive threat detection

Read More

Get the latest insights delivered to your inbox

Our newsletter, The Secure Stack, gives you monthly insights on cybersecurity and IT.

Ready to talk to an expert?

We’ll respond within 1 business day, or you can grab time on our calendar.