Security & Risk Assessment
Deep-dive risk analysis on identities, roles, systems and privileges: spotting anomalies, weighing impact on confidentiality, integrity and availability, and advising on the fix.
What I do
Expertise
Engagements are scoped to a decision, not a document. Each one ends with something your team can operate without me.
ISO 27001 & Compliance Support
Control mapping and evidence against ISO/IEC 27001, BIO/BIO2 and AVG, grounded in hands-on audit- and logging-procedure work, not just the framework on paper.
Identity & Access Management
IAM strategy and rollout across enterprise identity providers and governance platforms: joiner/mover/leaver automation, RBAC design, and entitlement reviews that survive an audit.
Privileged Access Management
PAM implementation and operation, end to end: privileged account onboarding, session monitoring, access governance, and incident reporting for critical infrastructure.
SSO & Identity Federation
OAuth 2.0 and OpenID Connect trust relationships between Identity Providers and Service Providers, Single Logout, MFA, and just-in-time provisioning.
Access Governance During Reorganisation
Access re-mapped to a new org structure without breaking segregation of duties: entitlement reviews, role redesign, and lifecycle management through the transition.
Let's strengthen your organisation's security
I work alongside your teams, map the risks and leave controls that hold up.