A person smiling. A person smiling.

DEFEND streamlines security for New Zealand Ministry of the Environment

DEFEND guided the New Zealand Ministry for the Environment to simplify its security stack, reduce overhead, and adopt a tailored, integrated Microsoft Cloud foundation.

March 24, 2026

Modern cloud adoption can empower organizations to deliver services efficiently, safeguard sensitive information, and withstand an increasingly complex threat landscape. Yet for public‑sector agencies, where budgets are tightly controlled and compliance obligations are high, embracing the cloud can be challenging. Maintaining security, transparency, and cost efficiency is a delicate balance: the need to move forward with modernization while proving every investment is justified and resilient.

DEFEND, a New Zealand–based cybersecurity services provider, has the experience and expertise to support organizations navigating this sort of complexity. The company’s philosophy centers on partnering with clients to maximize their security investments securely, effectively, and with measurable returns.

A long‑time Microsoft partner and a 2025 Microsoft Security Partner of the Year, DEFEND has been a Solutions Partner for Security since the designation launched in the program, and they were the first organization globally to earn all four Security advanced specializations. In addition to differentiating DEFEND in the market, these distinctions reflect years of technical alignment, joint workshops, and close collaboration with Microsoft engineering and partner teams.

That foundation positioned DEFEND to support New Zealand's Ministry for the Environment (MfE), a central government agency working across environmental policy, national programs, and collaboration with regional and indigenous partners.

Trimming tech overgrowth to strengthen and streamline security

MfE sought a secure and sustainable way to modernize their cloud environment to more efficiently manage high volumes of data and wide-ranging operations. The organization operates in a landscape where information integrity and public trust carry significant weight, making resilience, transparency, and control essential components of their modernization strategy.

At the same time, MfE wanted to reduce their operational overhead. With every dollar spent being rigorously scrutinized, they needed a way to pursue improvements without increasing cost or complexity. Their existing technology stack included multiple security tools and vendors, which contributed to an unnecessary operational burden and was becoming financially unsustainable.

Because MfE is one of DEFEND’s longest‑standing customers, the stage was already set for deep, meaningful collaboration. The teams made a strategic decision to consolidate MfE’s security posture using Microsoft as a single vendor.

“Rather than having a little bit of Microsoft here and a little bit of another vendor over there, they wanted to consolidate and leverage the Microsoft stack,” said Jono Green, Lead Microsoft Strategist at DEFEND. “Because Microsoft’s adopted Zero Trust themselves, we recognized the Microsoft capabilities aligned really well with what they wanted to do.”

MfE’s existing investments in Microsoft 365 provided a strong foundation to implement that Zero Trust security—a principle that safeguards data, apps, and employees by requiring verification for each access request. DEFEND worked with MfE to outline a path to streamline their ecosystem, eliminate fragmentation, and strengthen resilience—all while remaining within budgetary constraints.

People coworking in a glass enclosed office space.

"Our job is to deliver the most resilient solution at that point in time—and then continually maintain it, improve it, and leverage the latest features and capabilities.”

—Wenzel Huettner, CTO and Founder, DEFEND

Cloud security, grounded in Microsoft E5 and Sentinel

Together, the teams shifted toward a simplified, fully integrated Microsoft security stack in the cloud. Their work centered on strengthening MfE’s existing Microsoft Cloud investments, which included expanding MfE’s use of Microsoft 365 E5 Security & Compliance capabilities and deploying and maturing capabilities across Microsoft Defender XDR, Microsoft Sentinel, Intune, and Purview. DEFEND paired these solutions with advisory guidance to align each technical step to their Zero Trust architecture, working with other partners where needed to achieve the best outcomes in these areas.

In addition to simplifying and evolving MfE’s security deployments, the teams developed a roadmap designed to grow in response to an ever-changing threat landscape and emerging tech capabilities. DEFEND approached MfE’s modernization as a long‑term, iterative journey rather than a one‑time deployment.

“Our job is to deliver the most resilient solution at that point in time—and then continually maintain it, improve it, and leverage the latest features and capabilities,” said Wenzel Huettner, CTO and Founder at DEFEND.

Workshops funded through the Microsoft AI Cloud Partner Program—including threat protection and data security engagements—also played a foundational role. These provided a structured space to uncover requirements, define desired outcomes, and plan initiatives without adding cost pressure. As Green described it, the workshops created “a funded safe zone” where DEFEND and MfE could chart clear, achievable goals.

A person working at a laptop computer listening. A person working at a laptop computer listening.

"Because Microsoft’s gone on their own journey with Zero Trust, we said that aligned really well with what [MfE] wanted to do."

—Jono Green, Lead Microsoft Strategist, DEFEND

A deeply rooted approach to security and resilience

This combination of technical deployment, strategic planning, and continuous uplift formed a unified, Microsoft‑based security ecosystem tailored for MfE’s enduring resilience. MfE’s consolidation onto the Microsoft Cloud—bolstered by DEFEND’s long‑term partnership model—strengthened the organization’s ability to operate securely, efficiently, and within budget, along with reducing tool fragmentation.

The project also improved operational clarity. DEFEND’s model gives MfE visibility into threat detections, automation, and configuration decisions, empowering the team to not just leverage the tools but to also understand how and why each control contributes to their overall Zero Trust posture.

“Working with DEFEND has made a real difference in how we approach security,” said Steve Wheeler, Security Manager, Information Technology at MfE. “Not only have they helped the Ministry to deliver Microsoft Zero Trust security solutions, but they have also helped embed them into our operations, providing substantial value.”

Looking ahead, DEFEND is advancing new internal initiatives around Microsoft Purview, Microsoft Entra Private Access, and emerging data‑security and AI‑governance capabilities. These investments will help shape future offerings for organizations with similar needs, including public‑sector agencies facing regulatory expectations and evolving threat vectors.

Wherever the threat and technology landscape takes them, though, collaboration will remain a pillar of how they operate. This drives the partnership between DEFEND, MfE, Microsoft, and all their customers. “Security is something done with you, not to you,” Huettner said. “We go on a journey with Microsoft and our customers together … to improve the cyber resilience for our customers.”

Explore more Partner Success stories

Discover how organizations like yours are using Microsoft technology to help customers solve challenges, drive results, and scale their businesses.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.