Supporting delivery capability
Control identity and access without disrupting the systems that depend on it.
We review sign-in, administrative roles, access policies and account lifecycle controls, then implement the agreed changes in a staged and tested way.
Illustrative sample · constructed example
One access rule, two sign-in outcomes.
Pilot policy · administrator access
Selected check
Does the pilot policy enforce the intended access condition?
PILOT / ADMINISTRATOR SIGN-IN
Emergency access has a separate test and restricted runbook. This pilot result does not close the exception register.
| Test case | Expected behavior | Sample review |
|---|---|---|
| Intended administrator | Allow sign-in under the agreed conditions. | Pilot observation |
| Outside policy conditions | Deny access when the enforced rule requires it. | Report-only observation |
| Emergency access | Test the separate recovery route and its runbook. | Separate test required |
| Exceptions | Name the exception owner and review conditions. | Owner review required |
Report-only observation is not enforcement. The sample does not certify the tenant or establish insurer acceptance.
Microsoft guidance: report-only policy evaluation- Evidence
- Report-only observation identifies a sign-in outside the intended condition.
- Decision
- Review before enforcement
- Next action
- Correct the policy or document the exception and test emergency access.
Illustrative sample. Evidence covers the tested control and identities; insurer or auditor acceptance is not guaranteed.
Defined scopes
Explore the relevant engagement.
Choose the work that matches your planned change.
Passkeys and stronger sign-in
Move users away from weaker authentication methods with a staged, tested rollout.
MFA and privileged access
Reduce standing administration, strengthen Conditional Access and verify emergency access.
Identity and application review
Identify stale accounts, excessive permissions and application access that no longer has an owner.
Working together
A defined scope, with the right technical owners.
We work directly with organisations and alongside established technology partners. Scope, dependencies, commercial terms and the acceptance standard are agreed before delivery begins.
How engagements workFor technology partnersDiscuss the work
What needs to be resolved in your environment?
Tell us why the change is needed, what you want to achieve and your deadline. We clarify what the project includes and what must be checked before we quote it.
Discuss this project