Industries
Professional Services
When the product is expertise, the two things that matter are that people can work and that client information stays confidential. Everything else is detail.
What makes this different
The problems specific to your sector
Not a generic list. These are the things that come up repeatedly in this kind of business.
Downtime is billed time, and it is gone
A consultancy cannot make up an unbillable afternoon later. Unlike a shop, there is no queue that waits — the hours simply do not get invoiced.
Client data sits in places nobody mapped
Files arrive by email, land in personal OneDrive folders, get copied to a laptop for a site visit and are shared with a subcontractor. Confidentiality obligations apply to all of it, and most firms cannot say where any of it currently is.
Everyone works from somewhere else
Client sites, home offices, airports. The perimeter that used to be an office network is now a set of identities and devices scattered across the county and beyond.
Subcontractors and associates need access, briefly
Guest access gets granted for a project and never removed. Two years later an associate who has not worked with you since still has a live account.
Compliance
What you are actually required to do
Named obligations rather than the word 'compliance'. If one of these does not apply to you, we will say so.
Client confidentiality terms
Most professional engagement letters carry confidentiality obligations that outlast the engagement itself.
Cyber insurance conditions
Policies increasingly require MFA and endpoint protection as a condition of cover rather than a discount.
Your software
We expect to find these
We work around your line-of-business software rather than asking you to change it, and we deal with the vendor when needed.
- Microsoft 365
- Practice and project management
- Time and billing
- Document management
- CRM
Recommended
Where we would start
Managed IT Services
Proactive monitoring, patching and unlimited help desk for a flat monthly fee — so problems are fixed before they reach your staff.
Microsoft 365 Security
The tenant settings that decide whether a stolen password becomes an incident — reviewed, tightened and documented.
Entra ID & Conditional Access
Identity is the perimeter now. Conditional Access, MFA that resists phishing, and an end to permanent admin rights.
Backup & Disaster Recovery
Backups that are tested on a schedule, with a recovery time you have actually seen demonstrated — not assumed.
Questions
Common questions
Can staff work from client sites without exposing us?
Yes, and this is exactly what Conditional Access and managed devices are for. Access is tied to a known person on a compliant device rather than to being inside an office, which is both more secure and less restrictive than a VPN everyone resents.
How do we give a subcontractor access without giving them everything?
Guest accounts scoped to the specific site or folder, with an expiry date set at the point of creation. The expiry is the part that matters — access that has to be actively renewed does not accumulate quietly.
Ready to secure your business?
A free assessment: we review your network, backups, Microsoft 365 settings and exposure, then hand you the findings in writing — whether or not you hire us.