IT security, access and MFA
I review accounts, permissions and essential safeguards used in daily business operations. The result is a list of risks and concrete changes, from removing unnecessary access to enabling MFA and organising account recovery.
What the essential review covers
Accounts and permissions
I review access to email, panels and data and identify former-user accounts or unnecessary administrative roles.
MFA and recovery
I identify priority accounts for MFA and help organise recovery codes and the procedure for a lost device.
Updates and devices
I review essential update, screen-lock and device protection settings within the agreed scope.
Backups and incident response
I check whether critical data has backup coverage and whether the business knows whom to notify and what to disconnect after a suspicious event.
Review outcome
A prioritised list of changes
You receive a prioritised list of changes: which access to remove, where to enable MFA and what to plan next.
How the review works
-
Scope and systems
We define the accounts, devices and services covered and identify the people responsible for access.
-
Settings review
I check agreed accounts, roles, MFA, updates and essential data-handling safeguards.
-
Risk list
I order findings by their impact on the business and how urgently they need attention.
-
Implement changes
We agree which improvements I implement and which require the system owner or another provider.
Frequently asked questions
Is this a penetration test?
No. The essential review covers agreed settings, accounts, access, MFA, updates and backups. A penetration test or formal compliance audit requires a separate specialist scope.
Which accounts should receive MFA first?
Email, hosting, domains, cloud services and administrator accounts are usually the first priorities. The final order depends on the systems you use.
What will I receive after the review?
A prioritised list of risks and changes. We will agree which fixes I can make and which require the system provider.
Can changes be implemented in stages?
Yes. The recommendations allow the business to begin with the most significant improvements and schedule later work around available resources.
Describe the accounts and services you use
Include system types, user count and the area of concern. Do not send passwords, MFA codes or access credentials.