Service
Identity & access
Who can get into what — MFA where it counts, clean joiners and leavers, contractor access that expires, and less standing privilege. Practical IAM for oilfield and ag shops, not an enterprise IdP brochure.
Who it's for
Operators and SMBs where people, vendors, and contractors share Microsoft 365, VPN, shared inboxes, or shop systems — and where a leftover account after someone leaves is a real problem.
What you get
- MFA coverage check: where it is on, where it is missing, and what to fix first without locking out the field
- Joiner / leaver hygiene: a short checklist so new access is intentional and departures actually revoke accounts, mailboxes, VPN, and shared drives
- Contractor and vendor access: time-bounded accounts, least privilege, and a clear owner who can shut the door
- Privileged access basics: fewer standing admin rights, better shared-password discipline, and who holds the keys for critical systems
- A plain punch list your IT folks can run — no jargon stack for its own sake
What it's not
This is defensive identity hygiene — not a compliance audit, SOC 2 binder, zero-trust marketing deck, or attack demo on password spraying. We do not sell exploit techniques or IdP product pitches.