Identity & access management.
Attackers would rather sign in than break in. We make sure every person has one identity, the access their role needs and nothing more, and that all of it is removed the day they leave.
What’s included.
Sign-in
- Single sign-on across your apps
- Multi-factor authentication and passkeys
- Conditional access by device, location and risk
- A password manager for what is left
Access
- Roles that match the job, not the person
- Least privilege for staff and administrators
- Separate admin accounts, used only when needed
- Shared mailboxes and service accounts brought under control
Joiners, movers and leavers
- New starters set up from a checklist
- Access changed when a role changes
- Access removed the day someone leaves
- Access reviews on a schedule, with a record
How it works.
-
Map
We list every account, group and admin role, and who really uses them.
-
Design
Roles and sign-in rules are agreed with you before anything changes.
-
Roll out
Changes go in team by team, with help on hand for the first sign-in.
-
Review
Access is checked on a schedule and whenever someone moves or leaves.
Further reading
- article 5 min read Why reusing passwords is still one of the biggest security risks One password used in several places means one breach opens several accounts. How stolen passwords get used, and what to do in place of reuse.
- article 5 min read Should your business make MFA mandatory? Yes, and Microsoft and Google have already made it so for administrators. What a mandatory MFA rule should cover, and how to bring it in.
- lesson Beginner 3 min read What is a VPN? People use “VPN” for two different things: a secure link to the office network, and a privacy service. What each one does and does not do.
Related
- Essential Eight The Australian Signals Directorate’s eight strategies, assessed, put in place and kept in place.
- Best Practices The fundamentals done properly: sign-in security, patching, access control and policy.
- IT Support Help desk, devices, accounts and email, handled by people who know your setup.
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.