Secure IT that survives an incident
Identity, endpoints, network access and recovery set up so an attack does not take you out of operation - and so you can explain afterwards what happened.
30 minutes · no sales pitch · an honest read on whether we fit
Where it usually goes wrong
In a grown environment the risk is rarely in the firewall. It is in the things that were never finished.
- Accounts with permanent administrator rights
- Devices with compliance that is never enforced
- Passwords on the network instead of certificates
- Backups whose restore was never tested
Four pieces of work that build on each other
You can start at any of them. The order still makes sense, because each one carries the next.
- S.01Identity and privileged access. Conditional Access with clear rules instead of accumulated exceptions, privileged roles granted only for a period, tested break-glass accounts, and a documented recertification.Outcome: an access model an auditor can follow.
- S.02Endpoints and hardening. Intune compliance that is actually enforced, Autopilot for new devices, hardening against CIS baselines, and a way to time-box administrator rights.Outcome: a device fleet with a security state you can evidence.
- S.03Network access and certificates. 802.1X with certificates instead of passwords, a PKI your team can operate, and segmentation that actually contains an incident.Outcome: network access that is documented rather than historically grown.
- S.04Backup and recovery. Backups that cover the real failure cases, and a recovery order that has been rehearsed before it is needed.Outcome: a tested recovery with documented timings.
What sits underneath
These services belong to this area and can be commissioned individually.
What we do not do
Being clear up front saves us both a conversation.
No tool without an operator
We do not install anything nobody in your organisation can run. If the knowledge is missing, building it belongs in the project.
No security against the business
Controls your people have to work around are not controls. We design along the work as it is actually done.
No standing retainer through the back door
The project ends with a handover. Ongoing support is possible, but never a precondition for the result working.