Verify and improve access, email and cloud security
Unsure whether MFA protects the relevant access paths, whether a departed employee still has access, or whether a cloud setting is effective? We agree the checks, explain the findings and can implement separately commissioned changes with your IT team.
When you need this service
- You know a specific weakness and want it fixed and verified.
- The assessment is done but the recommendations are not implemented.
- Your IT team has no capacity for the changes.
The benefit for your organisation
- Agreed fixes are implemented and verified instead of remaining recommendations.
- Every change is verified and documented.
- You pay for solving the specific problem, without a large package.
Is the problem with email or your domain? →
How we can help
- Review and improve configurations, access rights and authentication measures.
- Strengthen email and domain security and address agreed configuration issues.
- Assess cloud and infrastructure settings and prioritise identified weaknesses.
- Improve vulnerability management, logging, backups and recovery within the agreed scope.
How the work proceeds
- Agree the systems, issue, access required and permitted checks.
- Present findings and recommended solutions in priority order.
- Agree changes, timing and rollback arrangements where applicable.
- Implement the commissioned work and check whether the agreed changes meet their objectives.
- Hand over a record of the work, check results and remaining limitations.
We identify the weakness, agree the change with the responsible people, carry out the agreed work and check the result. You receive a record of the changes and any remaining actions. Planning implementation covers access, responsibilities and a suitable change window for the specific system.
What you receive
A clear record of identified issues, an agreed action plan and — where implementation is commissioned from us — documented changes and verification of the results.
Scope and price
By written quotation, based on the systems, complexity, access and work required. Assessment and implementation are distinguished in the quotation. Remediation is not automatically included in every entry-level audit.
If this concerns DORA implementation, see the DORA scope and its terms.
Sample output
Demonstration example — not a real client.
| Change | Check | Result |
|---|---|---|
| Disabled a legacy mail protocol | Test of all mail clients | No disruption; record dated 14 Nov |
| Multi-factor sign-in for administrators | Sign-in attempt without a second factor | Access refused; confirmed |
Specific cases with their own scope
- Microsoft 365 and account securityfrom €1 900 for the review
- Restore test and continuityfrom €1 900 for the test
- New system acceptance checkfrom €2 400 for the check
Implementing changes after these reviews is quoted separately and is not included in the starting prices.
An identity review can cover the agreed Microsoft 365 or Entra configuration, exceptions, application permissions, session controls and available logs. Test accounts, permitted actions and acceptance checks are defined first. See how MFA and session protection are verified and how to check access removal.
Already have an MDR or SIEM provider?
We can review whether an agreed scenario produces useful evidence, reaches the right person and leads to an authorised action. We first review your provider’s existing scope to avoid commissioning work twice. Your provider keeps its contractual responsibilities; technical tests and access are agreed separately. How to evaluate coverage →
Inspect an executed laboratory exercise
DORA register lab: two corrections, one unresolved finding
Four local checks on synthetic CSV data with originals, corrections and retest. This is not a complete validator or a submitted reporting package.