Skip to content

Cybersecurity

Identity, access and MFA

A stolen password is the most common way into a company. Multi-factor authentication and proper access control stop most of those attacks, and we roll them out without making your team’s life harder.

What is included

  • Multi-factor authentication (MFA)

    An extra check on your phone for email, VPN and critical applications.

  • Least privilege

    Everyone accesses only what they need; admin accounts are used only for administration.

  • Orderly onboarding and offboarding

    A procedure to create and remove access on the day someone joins or leaves.

  • Single sign-on

    One account for several applications, with Microsoft Entra ID where it applies.

  • Access reviews

    Regular reviews of who can access what, including shared and service accounts.

Problems we solve

  • Company email protected by nothing more than a password.
  • Former employees who can still sign in to company systems.
  • Every user is an administrator on their computer.
  • Passwords shared over WhatsApp or written on paper.

How we work

  1. Inventory

    We identify current users, applications and access.

  2. Plan

    We define MFA methods, roles and the rollout order.

  3. Roll out

    We enable MFA group by group and help each person register.

  4. Follow up

    We document onboarding and offboarding and review access regularly.

In detail

Real MFA experience

We have rolled out Duo MFA with users synchronised from Active Directory: setting up the organisational unit, sync attributes, enrolling each phone and validating access. We have also enforced MFA during Microsoft 365 migrations, where careful planning is key so nobody gets locked out.

Rollout without friction

Adoption matters as much as technology. We explain to each person why it is being done, enable MFA group by group and give direct support during enrolment.

Tools we work with

  • Duo Security
  • Microsoft Entra ID
  • Active Directory
  • Microsoft 365
  • PowerShell

Tools we know first-hand. They do not represent partnerships or company certifications.

Frequently asked questions

Will MFA slow down work?

The check takes a few seconds and, configured properly, isn’t requested on every sign-in from a trusted device. It is a small cost compared with the risk it removes.

What if someone loses their phone?

We define a recovery procedure and backup methods so the person regains access securely.

Interested in this service?

Tell us about your situation and we will reply with next steps and a clear quote.