Security & Compliance

Security isn’t a product you buy once, it’s a set of habits and configurations that need to stay current. I handle the hardening and the paperwork, from access reviews to the policy documentation many compliance frameworks expect to see.

What this covers

Security hardening MFA enforcement, least-privilege access reviews, and closing the gaps that show up in most security assessments, before an assessment finds them.

Compliance groundwork Documentation and configuration support for frameworks like HIPAA, CJIS, or cyber insurance questionnaires, translated into what actually needs to change in your environment.

Access reviews Periodic review of who has access to what, so permissions reflect current roles instead of two years of accumulated exceptions.

Example engagements

• Preparing a business for a cyber insurance security questionnaire
• Running an access review ahead of a compliance audit
• Hardening MFA and conditional access policies across a tenant