An old account can become a current concern
An employee leaves, but an account remains active. A supplier can still open a folder they no longer need. Or nobody knows who should investigate an unusual sign-in. These are concrete reasons to review everyday configuration, even without a visible incident.
Digital incidents have different causes. Looking only at passwords or only at software gives an incomplete picture. Radorfa starts with the people, devices and information your organisation uses.
Map access to Microsoft 365
Review which accounts use Outlook, Teams, SharePoint and other business applications. Record who has administrator permissions, how staff sign in and which access external parties retain. Microsoft Entra ID is an important part of access control in Microsoft 365.
- Have accounts belonging to former employees been closed?
- Which additional sign-in protection is configured, and where are the exceptions?
- Who manages shared workplaces and devices?
- Can employees easily report suspicious messages and sign-ins?
Connect settings to recognisable situations
A technical setting must work in daily practice. Test a new employee, a lost phone and sharing a document with a supplier. Record who verifies identity, who grants access and how that access ends.
A strong password helps but does not provide complete protection against misuse. Discuss additional sign-in methods, appropriate permissions, device management and recovery. Employees also need clear instructions and a support route within the agreed service scope.
Make sure someone receives the alert
Sign-in logs and security alerts can support investigation. Their practical value depends on who reviews them, when this happens and how an urgent concern is escalated. Missing data or alerts can limit an investigation; monitoring does not guarantee detection of every incident.
Choose a small, verifiable first improvement
Choose one issue, such as inactive accounts or unclear external access. Radorfa investigates the configuration, discusses the required change and tests its outcome. We then document management, periodic review and support. Discuss the access you want to improve.
