Architected and oversaw core network modernisation for a major hospital, delivering a transition from legacy infrastructure to a resilient design with modern routing protocols and dual data centre connectivity while minimising disruption to clinical services.
The Challenge
A major hospital needed to modernise aging core network infrastructure that had become a reliability and operational risk. The existing network had been extended over many years without architectural refresh, resulting in complex dependencies and limited redundancy. The modernisation needed to occur while maintaining continuous availability for clinical systems - any extended outage would directly impact patient care. The transition required careful staging to avoid disruption to life-critical systems while achieving meaningful improvement in resilience and supportability.
Our Approach
We developed a phased migration approach that allowed progressive transition from legacy to modern infrastructure without requiring extended maintenance windows. The target architecture established dual data centre connectivity with modern routing protocols, eliminating single points of failure present in the legacy design. Network segmentation was redesigned to improve security posture and simplify operational management. Each migration phase was planned with rollback procedures and tested during low-activity periods before execution. Close coordination with clinical and IT operations teams ensured stakeholders understood the transition plan and could support go/no-go decisions at each stage.
Results
Successful transition from legacy to modern core network infrastructure
Dual data centre connectivity eliminating previous single points of failure
Modern routing protocol deployment improving convergence and manageability
Improved network segmentation and security posture
Migration completed with minimal disruption to clinical services
Simplified operational management reducing ongoing support burden
Further Reading
VLANs alone do not constitute effective segmentation. Explore zone-based architecture, micro-segmentation technologies, and east-west traffic inspection strategies for critical infrastructure networks.
The gap between intended and actual firewall state is often wider than organisations realise. Rule sprawl, documentation drift, and compliance assumptions create false confidence in network security.
Navigate the Australian Energy Sector Cyber Security Framework with actionable guidance on C2M2-based domains, maturity levels, and building a sustainable compliance program aligned with the SOCI Act.
Get in touch to discuss how we can help your organisation.
We take our confidentiality obligations seriously. The project descriptions on this page have been generalised to protect client identities. We are happy to discuss our experience and approach where appropriate during a confidential conversation.