Cybersecurity · Identity and privileged access
Access granted carefully and removed automatically
We automate access for people joining, moving and leaving, introduce phishing-resistant sign-in, and set permissions based on what people actually use. Administrator access is granted when needed and recorded, rather than held permanently. This is identity and privileged access management, built into your systems rather than handled by hand.
Where this starts
Stolen credentials are still the easiest way in
Stolen and misused passwords play a part in a large share of breaches every year. The cause is usually how access is managed, not the technology. Access is granted quickly because someone is waiting for it, and removed slowly because nobody is. It is reviewed once a year by managers approving lists they cannot understand. Over time, people build up far more access than anyone intended, and nobody can see the full picture.
What we usually find
- People who have left still able to use applications that are not linked to the main directory
- Contractor and system accounts with no owner and no expiry date
- Access reviews approved in bulk, because the permission names mean nothing to the reviewer
- Administrators with permanent high-level access, because requesting it each time is inconvenient
- Shared emergency passwords stored in a password manager and never changed after use
- More system accounts and API keys than people, with nobody managing them
Our position
Access granted for one urgent afternoon is often still there three years later. Setting an expiry date on access matters more than approving it.
What the work covers
People, administrators and systems
Identity programmes often cover employees thoroughly but overlook the two groups that carry more risk: administrators and automated systems.
Joiners, movers and leavers
We connect your HR system to automated account set-up. Access follows each person’s role, and when someone leaves, their access is removed the same day rather than at the next review.
Sign-in
We set up single sign-on across all your applications, including those bought outside the normal purchasing process. Administrators use phishing-resistant methods such as passkeys and hardware keys, and access rules take account of the device and the level of risk.
Permissions and least privilege
We base roles on what people actually use, not what they once asked for. We separate duties where it really matters, and give managers access reviews they can understand and decide on.
Administrator access
Administrator passwords are stored securely and issued when needed. Higher access is granted only for the time it is needed and then removes itself. Sessions on critical systems are recorded, and emergency accounts are monitored and have their passwords changed after every use.
System accounts and credentials
Every system account has an owner. We replace permanent keys with short-lived credentials, connect cloud and pipeline identities securely, and automate certificate renewal so an expired certificate never causes an outage again.
Fewer directories
We reduce the number of places where user accounts are held. Every extra directory is another place where a former employee’s account can survive, and another set of reviews that nobody completes properly.
How it stays fixed
Access that expires by itself
In most organisations, the most effective change is not a new tool. It is making access temporary by default, so people end up with less access over time rather than more.
Joiner
Accounts are set up automatically from your HR system. New starters have the right access on their first morning, without anyone raising a ticket.
Mover
When someone changes role, their old access is removed rather than kept alongside the new. This is where most excess access normally builds up.
Leaver
Access is removed the same day across all connected applications, with a record that an auditor can read without needing to interview anyone.
Elevation
Administrator access is requested, approved and granted for a limited time, then removed automatically. Nobody holds permanent administrator access, including us.
Review
Access reviews show how each permission has actually been used, so managers can see what someone needs before approving it again.
What you are left with
- Accounts created and removed automatically from your HR system
- Phishing-resistant sign-in required for administrators, not just recommended
- Temporary administrator access, with permanent high-level access removed
- A complete, owned list of system accounts and credentials
- Access reviews that lead to real decisions rather than automatic approvals
One question to start with
If someone left on Friday, which systems would still let them in on Monday? We usually start by answering that properly.