Identity, IAM & Privileged Access Management

Control who can access systems, what privileges they receive, how they authenticate and how privileged access is governed.

Work we take on

Entra ID / Active Directory / Okta / Duo / JumpCloud
MFA / passkeys / FIDO2
SSO / SAML / OIDC when included in the engagement
Conditional access
Joiner / mover / leaver workflows
Privileged access / PAM platforms
Service-account review
Admin role and break-glass planning

When this deserves attention

Admin accounts are shared or overprivileged
Offboarding leaves stale access behind
MFA exists but is inconsistent
A cyber-insurance or customer review focuses on identity controls

How we work through it

We start with assets, identities, data and existing controls, then trace how an alert would become an investigation or response. That makes gaps in ownership easier to see.

Security responsibilities are documented. The customer should know what is monitored, which actions Orbiwest can take, which actions require approval, and how to access the relevant reporting and tools.

Security visibility and authorityWe document what is monitored, who receives alerts, what Orbiwest may act on, what requires customer approval, and how authorized customer contacts access relevant reporting and platforms.

Do the security tools add up to a working program?

Tell us what is monitored today, who receives alerts and which risks or customer requirements are driving the review.

Talk to Orbiwest →