Identity & access management.
Attackers would rather sign in than break in. We make sure every person has one identity, the access their role needs and nothing more, and that all of it is removed the day they leave.
What’s included.
Sign-in
- Single sign-on across your apps
- Multi-factor authentication and passkeys
- Conditional access by device, location and risk
- A password manager for what is left
Access
- Roles that match the job, not the person
- Least privilege for staff and administrators
- Separate admin accounts, used only when needed
- Shared mailboxes and service accounts brought under control
Joiners, movers and leavers
- New starters set up from a checklist
- Access changed when a role changes
- Access removed the day someone leaves
- Access reviews on a schedule, with a record
How it works.
-
Map
We list every account, group and admin role, and who really uses them.
-
Design
Roles and sign-in rules are agreed with you before anything changes.
-
Roll out
Changes go in team by team, with help on hand for the first sign-in.
-
Review
Access is checked on a schedule and whenever someone moves or leaves.
Further reading
- lesson Beginner 3 min read What is a VPN? People use “VPN” for two different things: a secure link to the office network, and a privacy service. What each one does and does not do.
- lesson Beginner 3 min read What is software as a service (SaaS)? SaaS is software the provider runs for you and you use over the internet. What the provider looks after, what stays with you, and what to ask before signing up.
- lesson Intermediate 3 min read Encryption vs hashing: what’s the difference? Encryption can be reversed with a key. Hashing cannot be reversed at all. What each is for, and which one should protect what.
Related
- Essential Eight The Australian Signals Directorate’s eight strategies, assessed, put in place and kept in place.
- Best Practices The fundamentals done properly: sign-in security, patching, access control and policy.
- IT Support Help desk, devices, accounts and email, handled by people who know your setup.
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.