Access review
Review accounts, employee permissions, external connections and administrative access.
Service 05
Essential IT infrastructure security
I remove common high-risk weaknesses: excessive permissions, exposed services, outdated settings and unmanaged accounts.
When to contact
This service is useful when
- the same passwords and accounts are shared by several people
- nobody knows which services are exposed to the internet or why
- former employees retain email, VPN or file access
- critical devices and user computers are placed in one network
Scope of work
What can be included
in the task
The exact scope depends on your existing infrastructure and goal. Priorities and expected outcomes are agreed before work begins.
Network protection
Firewall rules, closing unnecessary services and separating device classes.
Secure VPN
Controlled remote access with individual credentials and appropriate restrictions.
Updates
A patching plan for servers, workstations and network equipment.
Account lifecycle
Rules for granting, changing and revoking access during staff changes.
Incident readiness
Review backups, logs and contacts for rapid response.
After completion
What will change
- 01fewer excessive and forgotten permissions
- 02unnecessary external entry points are closed
- 03critical devices are separated from user equipment
- 04a prioritised plan for further security improvements
Process
From initial assessment
to a working result
- 01
Review
I examine access, network rules, updates and the most critical systems.
- 02
Risk map
Findings are ranked by impact and urgency without fear-based reporting.
- 03
Remediation
I close agreed weaknesses while preserving business operations.
- 04
Operating rules
I document access, updates, backups and critical configuration checks.
Frequently asked questions
What you need to know
Is this a full information security audit?+
This service focuses on essential technical protection and common risks. Formal certification or specialised testing requires a dedicated security organisation.
Can security be improved without stopping the office?+
Most changes can be introduced in stages. Risky work is agreed in advance and scheduled for a suitable time.
Where do we start if there are no security procedures?+
Start with critical systems, administrative access, internet-facing services and backups. This quickly reveals the main priorities.
Contact
Get a clear plan of action
Tell me what needs to be configured or what is not working. The number of employees and devices, your country or city, and the desired timeframe are enough for an initial conversation.