Written authorization and scope
Improve who can access important systems and how access is granted or removed.
Identity, access and account security
Give the right people the right access.
Improve who can access important systems and how access is granted or removed.
Project valueQuoted to scopeNo payment before scope agreement
DeliveryAgreed with your quoteScoped after discovery; after brief, access and approvals
Your first milestoneAuthorize the scopeA useful review point before the next stage
Evidence that guides the next action
Practical remediation priorities
We separate findings by impact and explain how to reproduce or verify them. The outcome is a focused action plan with clear scope and limitations.
Verification of agreed fixes
Findings are tied to evidence and prioritized next steps within the authorized scope.
In our clients’ words.
“Keep up the good work!”
“ICM did a great job, on time and within specified budget.”
“Great Contractor! Simply WONDERFUL!”
WHAT YOU RECEIVE
Your Identity, access and account security project, clearly defined.
Owners of authorized websites, applications and systems who need an assessment or scoped remediation.
Role review
Set out who may view, change and approve the relevant records. Test representative authorized and unauthorized accounts, and document administrator ownership rather than sharing one unrestricted login.
MFA and access configuration
Set out who may view, change and approve the relevant records. Test representative authorized and unauthorized accounts, and document administrator ownership rather than sharing one unrestricted login.
Joiner and leaver controls
Document authorized coverage, sensitive actions and the required approval boundary. Apply or assess the agreed controls and record residual risks; no scope language is a blanket guarantee of security or compliance.
Scope and requirements
The organization approves privileged access and recovery ownership.
Any additional work is scoped and priced for your approval.
THE DELIVERY PATH
From your brief to the finished work.
Follow the preparation, review and delivery stages for this service.
Authorize the scope
Agree assets, methods, exclusions, data handling and test windows.
Assess the system
Use the approved checks and document reproducible findings.
Prioritize remediation
Explain impact, ownership and recommended next steps.
Verify agreed improvements
Retest the scoped fixes and document any remaining limitations.
What is included?
Includes Role review, MFA and access configuration and Joiner and leaver controls. The organization approves privileged access and recovery ownership.
Does an audit certify legal compliance?
No. Technical assessment and remediation support legal and compliance work but do not replace qualified legal advice or an independent certification.
Can you test a third-party system?
Only with explicit authorization from the system owner and within the agreed rules.
Are all future vulnerabilities covered?
An assessment applies to a defined scope and time. Ongoing monitoring and future work require their own agreement.
Related services
YOUR NEXT LEAP STARTS HERE
Ready to put Identity, access and account security to work?
Share the change you want to make. We will help turn it into a clear, practical project.