Identity & access
Give sign-in and access a standing discipline.
Multi-factor sign-in, Conditional Access, and password hygiene usually start as one bullet inside a broader security list. For firms where confidentiality is the job itself, identity deserves its own standing discipline: who can sign in, from where, into what, and how that changes the moment a role changes.
Sign-in as the front door
Most identity risk starts at the moment someone signs in, so that moment gets the most consistent attention.
Multi-factor by default
Sign-in to email and core business systems expects a second factor as the normal path, not a setting someone has to opt into.
Conditional access rules
Access to sensitive systems can weigh device, location, and risk before it is granted, instead of treating every sign-in attempt the same way.
A documented emergency account
At least one break-glass account is set up, tested, and kept out of routine changes, so a lockout during a real problem does not become a second crisis.
One identity, reviewed on purpose
Fewer standing passwords and a routine review catch more risk than another policy document.
Single sign-on where it exists
Business applications that support single sign-on can be connected to the identity people already use for email and files, instead of issuing a separate username and password. The work is scoped with you and the vendor before it starts.
SAML and federated setup
A vendor that requires SAML configuration for its application gets a coordinated, documented setup with a named owner, scoped before work, rather than whoever happened to answer that ticket.
Access reviewed and synced to the record
Permissions run through groups tied to a role and are updated when the employee record shows a role change or departure, with the access checklist, in both plans.
What each plan covers, and what is a project
Both plans include multi-factor setup and sign-in recovery. The Managed plan adds the security baseline. Formal identity programs are quoted separately, in writing.
In both plans
Multi-factor sign-in setup, password and sign-in recovery, and accounts and access prepared or removed for every arrival and departure, with the access checklist.
Added in the Managed plan
Multi-factor sign-in enforced for all users, separate administrator accounts, and the platform’s sign-in settings configured and kept current. The Essential plan does not include them.
Formal programs, quoted separately
Privileged-access platforms, identity-governance programs, attestations from a qualified assessor, and replacing or migrating an on-premises directory federation setup are quoted in writing as their own project.
Before the first call
A useful first conversation starts with simple facts.
Bring what you already know. Nothing on this list needs a password.
Bring this to the first call
Rough answers are fine.
- Current multi-factor coverage across email and business systems
- Applications that support single sign-on but are not yet connected
- Any vendor requiring a SAML or federated setup
- Last time access to sensitive systems was reviewed by role
- Whether a documented emergency account exists today
Tell us your team size and what keeps interrupting the work.
Managed plan: $89 CAD per user, per month.Essential, at $59, covers help desk and administration only.
Tell us about your firm.
Your team size, the systems you rely on, and the first thing you want handled. A few sentences is plenty.