Skip to main content
Loyca
Service reference 12Architecture & EngineeringACTIVE PRACTICE PROTOCOL

Identity & Access Management

The right people, the right access, provably

IAM design and implementation: SSO, MFA, privileged access, joiner-mover-leaver, and access recertification.

PROTOCOL OVERVIEW

Executive Context & Technical Scope

Identity is where most audits find their worst findings and most attackers find their easiest path. We design and implement the identity layer — single sign-on, phishing-resistant MFA, role design, privileged access controls — and build the joiner-mover-leaver process that keeps it accurate after we leave.

TARGET PROFILES

Who Requires This Protocol

Organisations where leavers still have accounts
Companies failing access review findings repeatedly
Teams consolidating onto a single identity provider

ENGAGEMENT ARTIFACTS

Verifiable Outputs & Deliverables

Identity architecture and role model

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

SSO and phishing-resistant MFA rollout plan

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Privileged access management design

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Joiner-mover-leaver workflow and access recertification process

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

PRACTITIONER FAQ

Frequently Asked Scoping Questions

Is SMS-based MFA good enough?
It is better than nothing and worse than everything else. For privileged and finance roles, move to app-based or hardware factors.
Which identity provider should we use?
Usually the one bundled with what you already pay for. We will say so if that is the answer rather than propose a new purchase.
PRACTICE CONTINUUM

INTELLIGENCE WITHOUT LIMITS

Scope Identity & Access Management for your organization.

Get a fixed-scope proposal, verifiable deliverables list, and exact timeline for identity & access management.

Direct Hotline:+254 740 658 068
NO-OBLIGATION GUARANTEE

What to expect in your scoping call

  • Direct Senior Lead

    You talk to a seasoned cybersecurity consultant, never a sales script.

  • Strict Confidentiality

    We operate under mutual NDA before discussing sensitive architecture.

  • Actionable Next Steps

    Immediate priorities and costed options, whether you engage us or not.

Message Loyca on WhatsApp