Case Study: Health Informatics Centre (HIC) at the University of Dundee achieves secure, compliant cloud research for sensitive health data with Sophos Cloud Optix

Sophos Cloud Optix gives confidence around security and compliance for health data research at HIC, part of the University of Dundee

The Health Informatics Centre (HIC) at the University of Dundee, custodian of consented health data covering roughly 20% of Scotland over 30 years and supporting about 120 research projects, needed to extend its Trusted Research Environment into AWS while preserving strict governance and ISO 27001 compliance. To secure its hybrid cloud move and complement existing tools, HIC evaluated and selected Sophos Cloud Optix from vendor Sophos.

Sophos provided a three-month Cloud Optix trial, helped onboard HIC, and delivered a solution integrated with Sophos Central and HIC’s other security products; HIC then purchased a three‑year Cloud Optix licence to cover its predicted AWS workload. Sophos’s 24/7 monitoring, cloud posture guardrails and single-pane visibility improved compliance confidence, saved engineer time, enabled project-by-project cloud cost oversight, and ensured ongoing ISO 27001–aligned protection for HIC’s sensitive research data.

Health Informatics Centre (HIC) at the University of Dundee

Ian Fletcher

Information Security and Governance Manager