06
Security & IAM Reviews
A combined security and IAM review that examines your overall cyber posture and then dives into identity controls across AWS, GCP, Google Workspace and Microsoft Azure. We find excessive permissions, weak governance and risky configurations, then give you a concrete plan to fix them.
Scope
Security Review▶
end-to-end assessment of the organisation's security posture, governance, architecture, controls, vulnerabilities and key cyber risks
AWS IAM Review▶
IAM users, roles, policies, permissions, Identity Center/SSO, MFA, privileged access, service accounts and least-privilege controls
GCP IAM Review▶
identities, roles, permissions, service accounts, privileged access, organisation/folder/project-level IAM and excessive permissions
Google Workspace IAM Review▶
user lifecycle, administrator privileges, groups, MFA/2-Step Verification, SSO, third-party application access and external sharing
Microsoft Azure IAM Review▶
Microsoft Entra ID, RBAC, privileged roles/PIM, Conditional Access, MFA, service principals, managed identities and joiner-mover-leaver controls
Deliverables
- Security posture assessment report with risk ratings and key cyber risks
- IAM entitlement review per platform with excessive permission findings
- Least-privilege remediation roadmap with prioritised actions
- Control gap analysis against industry benchmarks and provider best practice
- Executive summary and technical walkthrough
Typical timeline
Scope call & access
Scope confirmation, read-only access and data sources agreed.
Review window
Security posture and IAM entitlement analysis.
Reporting
Draft report, QA review and final delivery.
Debrief
Walkthrough with security and platform teams.