The Ocean Foundation Customer Story: Securing Global IT Systems

Challenge

The Ocean Foundation reached a critical transition point.

The organization operated with a mostly remote workforce distributed across locations and time zones, with heavy reliance on Google Workspace and a growing ecosystem of SaaS applications. Over time, documentation and processes for IT operations and security became inconsistent.

When the internal IT resource departed, leadership faced operational and security risk. The organization needed a trusted partner to take over IT operations quickly, ensure continuity for staff, and establish a structured, security-first approach appropriate for a nonprofit handling sensitive donor, financial, and program data.

As CEO of The Ocean Foundation, an $18 million ocean conservation nonprofit with about 30 employees, Mark J. Spalding described the situation directly:

“I was constantly worried about cybersecurity risks and potential downtime. We lacked in-house expertise, and when our one IT person retired, we needed to act fast.”

Hero - Securing the Systems Behind a Global Conservation Effort

The Engagement

Defensible Technology was engaged as both a Managed IT Services Provider and a security-focused advisor, ensuring operational stability while maturing the organization’s security posture.

The work focused on four core areas.

IT Transition and Operational Continuity

Defensible assumed full responsibility for day-to-day IT operations following the internal IT departure. User support and endpoint management were stabilized for a fully remote workforce, and systems, access, and workflows were documented to eliminate institutional knowledge gaps.

Google Workspace and SaaS Management

Identity and access management were standardized across Google Workspace. MFA and least-privilege access controls were implemented, and SaaS usage was reviewed and rationalized to reduce risk and complexity.

Security Controls and Governance

Defensible introduced a structured set of baseline security controls aligned to NIST best practices. Endpoint protection, patch management, and centralized logging were implemented, alongside incident response, access management, and change management processes.

Ongoing Managed Services

Defensible provides 24×7 monitoring and support for users, endpoints, and core systems, with proactive security operations rather than reactive troubleshooting. Leadership receives regular check-ins and reporting for visibility and confidence.

The Result

Defensible helped The Ocean Foundation complete a seamless transition from internal IT to an outsourced MSP without disruption to staff.

The organization now has a more secure and manageable Google Workspace environment, clear ownership and documentation, and repeatable IT and security processes. Leadership reports reduced operational risk and increased confidence, with an IT and security posture that supports long-term growth and mission execution.

Bottom - Securing the Systems Behind a Global Conservation Effort.jpg

CEO Perspective

"Now we have cybersecurity monitoring, password management, regular staff training, and the ability to manage access and enforce security policies across our almost entirely remote workforce, anywhere in the world. Most importantly, we get prompt responses whenever questions or issues arise.

The Defensible team is professional, knowledgeable, and easy to work with. I recommend them highly for both their expertise and the value they provide."

Mark J. Spalding

President & CEO, The Ocean Foundation

Securing the Systems Behind a Global Conservation Effort

Customer