Where access control drifts
Legacy authentication, stale admin roles, unreviewed exclusions, weak break-glass access and policies that nobody can explain or safely enforce.
M365 security clean-upCyber Essentials Plus readiness service
Entra ID and Conditional Access reviewIdentity and Conditional Access consulting
Entra ID and Conditional Access without brittle lockouts
Map the access paths first, then tighten MFA, admin roles, Conditional Access and device trust with report-only testing, named exceptions and rollback notes. Initial review: £1,500 to £2,500; usually 5 working days.
Scope, output and handover
Review MFA methods, admin roles, Conditional Access, legacy authentication, break-glass accounts, app access and audit evidence. Output: access map, exception register and enforcement sequence.
Common questions
Can Conditional Access be fixed without locking people out?
Yes — report-only, careful scope, monitoring and working break-glass before enforce.
What does the initial identity review cost and take?
It is normally scoped within the Microsoft 365 Security Review at £1,500 to £2,500 and usually takes five working days. Remediation timing depends on exclusions and rollout risk.