SECURITY · IDENTITY & ZERO TRUST
A lockout should not be able to shut you out of Microsoft 365. Get break-glass emergency access accounts that work when everything else does not.
A fixed-fee quick engagement that creates, protects, tests, and documents emergency access accounts in Microsoft Entra ID, so a Conditional Access mistake or an outage never locks you out.
The deliverable
Emergency Access Runbook, on your desk
A representative deliverable. Yours is built on your own environment, with names and figures redacted here.
This is for you if
Built for the Owner or IT Director.
A lockout scare or an audit finding flagged the lack of emergency access. You have no documented way back in if Conditional Access or MFA breaks. An emergency account exists, but nobody has tested it or set an alert for when it is used.
What you receive
Emergency Access Runbook
Two emergency accounts, excluded from your Conditional Access rules, protected with hardware keys, monitored, and documented.
Tested lockout drill
A simulated lockout proving the accounts actually work.
Alerting on use
Sign-in alerting so any use of a break-glass account is seen.
Typical timeline
1 dayIncluded
- Two emergency access accounts
- Conditional Access exclusion and hardware-key protection
- Sign-in alerting
- Tested runbook
Assumptions
- One Microsoft Entra ID tenant
Not included
- Broad identity redesign
- Privileged access management rollout
Scoped separately here: Fix & improve.
Required access
- Entra ID admin access
- Two hardware security keys
- A 30-minute kickoff with IT
Engagement complete when
The engagement is complete when the two accounts are created, protected, tested, and the runbook is delivered.
Get emergency access accounts that have been tested against a simulated lockout.
One fixed fee, agreed in writing before any access is granted. The timeline above is the whole engagement, and what you keep is documentation your team can act on. One senior engineer scopes and delivers it.
The fee depends on what is actually in your environment rather than your headcount. The scope-fit check tells you where you land →