The entry product

SaaS & Identity Control in 90 Days.

From fragmented applications and access rights to a demonstrable governance model with owners, controls, evidence and management information.

Book an exploration→
Three phases

A product, not a one-off engagement.

Clear scope, deliverables, phasing and outcome — not open-ended consultancy activity.

1

Discover

Getting visibility
Activities

Connect sources, validate inventory, identify owners and risks.

Validated SaaS/identity baseline
→
2

Govern

Setting up governance
Activities

Ownership, policies, control library, JML/access reviews, KPIs and cadence.

Governance operating model
→
3

Prove

Making it demonstrable
Activities

Automate evidence, dashboards/reporting, control gaps and improvement backlog.

Audit-ready evidence pack + roadmap
Deliverables

What's in place after 90 days?

Not "we run a project" — this is what the organisation has in place after 90 days.

Validated SaaS and identity inventory.
Named business and technical owners.
Access review process.
Joiner / Mover / Leaver governance.
Governance control library.
Control owners and control frequency.
Evidence sources per control.
KPIs and management scorecard.
Audit evidence structure.
Mapping to relevant ISO 27001 / NIS2 / GDPR controls.
Prioritised improvement and automation backlog.
Honest expectations

What you can expect from us.

Trust isn't built with superlatives, but with concrete, verifiable evidence.

One demonstrable, current overview of access across the digital landscape.
Demonstrable optimisation opportunities, always sourced and contextualised — no unsubstantiated percentages.
What we need from you

Limited effort, clear division of roles.

90 days of duration doesn't mean 90 days of full-time work on your side.

Access to relevant tenants/tools (e.g. Microsoft Entra, Zluri) for discovery — read access is enough to start.
One or two points of contact on your side for decisions on ownership and scope.
Availability for a short weekly check-in (around 30–45 minutes).
Access to existing documentation on current processes, if available.

Indicative effort on your side: a few hours per week, concentrated around the start of each phase.

Next step

Start with one demonstrable governance problem.

No large transformation programme required. Start with SaaS & Identity, then expand to Data and AI.

Book an exploration→