Security & Identity Management

Passwords alone are not enough

Most break-ins at small businesses don't involve hacking anything clever. Someone signs in with a password that was phished, guessed or leaked from another website. Multi-factor sign-in – a code or an app approval on top of the password – stops the vast majority of those attempts. It is the single most effective security step most offices can take, and we turn it on for every account.

One identity for everything

Microsoft Entra ID (formerly Azure Active Directory) is the identity behind Microsoft 365, and it can sign people in to many other business apps as well. With single sign-on, employees use one secure account instead of a dozen passwords, and when someone leaves, disabling that one account locks them out of everything at once. For offices that still have a local server, we connect it to the cloud identity so people have one sign-in, in the office and outside.

The right access for each person

• Permissions by role – the front desk sees what it needs, accounting sees what it needs.
• Administrator rights only for the people who really need them, on separate accounts.
• Sign-in rules – for example, blocking sign-ins from countries where you have no employees.
• Alerts for risky sign-ins, which we review.

Joiners and leavers

The most common gap we find is accounts of people who left months ago that still work. We set up a simple routine: a new employee gets the right accounts on day one, and a departing employee loses access on their last day – email forwarded, files handed over, devices returned.