IT Discovery and Communication Platform for a Hospital Group

The Challenge

A hospital group with 14,000 employees across several sites faced a positioning question. IT leadership had to be able to say, defensibly, where IT stood, which action areas took priority, and how progress would be measured.

This was not primarily a security topic. It was a visibility problem: in a decentralised organisation many projects run in parallel, and without a consolidated view the contribution of IT to the business remains an assertion. If you cannot show what is running and what it achieves, you renegotiate every budget from scratch.

Our Approach

The assessment first. We surveyed the IT landscape in a structured way, deliberately non-intrusively: passive sources and single, ordinary requests, no scans, no exploitation, no load generation. In an environment with clinical portals and patient data that is not a precaution but the condition under which such a survey may happen at all. Because nothing was forced, we also verified the negative findings: where a concern existed and did not hold up, the result says so explicitly.

Then the derivation. The findings became action areas, ordered by effort and effect rather than by count. The central finding was an asymmetry: what is visible from outside was largely well run. The topics with the greatest leverage lay where no external view reaches, namely in internal ways of working, in governance around AI use, and in consistency across the decentralised sites.

Then the platform. The greatest immediate leverage was communication itself. We built an AI-assisted internal platform that consolidates the state of running projects and makes it readable for management and business units. Instead of status slides someone assembles by hand before every meeting, there is an overview with defined metrics expressing the contribution of IT in terms the business understands: time saved, satisfaction, throughput, number of live projects.

The Results

The platform is in use and delivers the consolidated view that used to be recreated each time. The benefit shows less in effort saved than in reliability: two meetings now cite the same figures.

From the assessment, the further action areas are named and prioritised, with reasoning that holds up in a management meeting. That is precisely the difference from a tool report: the result is not the list of findings but the order in which they are sensibly worked through.