onionio.com
Hybrid Identity Cyber Accelerator for Microsoft AD and Entra
Microsoft Active Directory and Entra are typically in hybrid state for public sector organisations that have not built applications and services on cloud native architectures. This leaves them vulnerable to common tactics used by threat actors. We remove exploitable vulnerabilities and reconfigure for security and resilience in greatly accelerated timeframes.
Features
- AD Risk Scoring: Evaluate AD health and security posture
- Attack Path Mapping: Identify lateral movement and escalation routes
- Credential Exposure Detection: Find weak, reused, or exposed passwords
- Unconstrained Delegation Alert: Detect insecure delegation configurations
- Privileged Account Audit: List and validate high privilege users
- Hybrid Identity Review: Analyze Azure AD Connect security settings
- Conditional Access Enforcement: Enforce policies for high risk users
- Remediation Planning and Execution: break attack path for common TTPs
- MITRE ATT&CK Mapping: Link findings to attacker TTPs for context
- Remove excess privilege, rogue access and automate AD zoning
Benefits
- Greatly reduces cyber risks by breaking common attack paths
- Reduce attack surface across cloud and on-prem environments seamlessly
- Reduces the cost of PAM investments by removing excess accounts
- Reduced impact of cyber incidents and fasted time to recover
- Improves resilience by reintroducing zoning and building defendable boundaries
- Prevent lateral movement between on-prem and cloud identity systems
- Ensure compliance with identity governance and zero trust principles
- Improve incident response through integrated identity threat intelligence signals
- Mitigate ransomware and APT risks targeting identity infrastructure gaps
- Reduces AI risks by implementing clear just in time access
Data architect
| £1,075.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Enterprise architect
| £1,075.00 |
|
| £1,275.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
Network architect
| £675.00 |
|
| £1,075.00 |
|
| £1,275.00 |
|
Security architect
| £1,075.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Solution architect
| £675.00 |
|
| £1,075.00 |
|
| £1,275.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
Technical architect
| £675.00 |
|
| £1,075.00 |
|
| £1,275.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
Chief information security officer
| £1,675.00 |
|
Chief technology officer
| £1,675.00 |
|
Cyber security audit and assurance
| £1,275.00 |
|
| £1,675.00 |
|
Cyber security governance and risk management
| £675.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Cyber security monitoring
| £675.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Cyber security incident response
| £1,025.00 |
|
| £1,675.00 |
|
| £2,075.00 |
|
Cyber security vulnerability management
| £675.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Cyber security digital forensics
| £1,025.00 |
|
| £1,675.00 |
|
| £2,075.00 |
|
Cyber security testing
| £675.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Cyber security secure design
| £675.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Data engineer
|
£1,075.00 |
| £1,275.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
Data scientist
| £1,075.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
| £1,875.00 |
|
Machine learning engineer
| £1,475.00 |
|
| £1,675.00 |
|
End user computing engineer
| £975.00 |
|
| £1,075.00 |
|
| £1,475.00 |
|
| £1,675.00 |
|
Infrastructure engineer
| £975.00 |
|
| £1,075.00 |
|
| £1,275.00 |
|
| £1,475.00 |
|
Delivery manager
| £675.00 |
|
| £1,075.00 |
|
| £1,275.00 |
|
| £1,675.00 |
|
Programme delivery manager
| £1,275.00 |
|
Standards and certifications
-
ISO/IEC 27001 certification
-
No
-
ISO 28000:2022 certification
-
No
-
ISO 9001 certification
-
No
-
Quality management systems (QMS)
-
Yes
-
CSA STAR certification
-
No
-
PCI certification
-
No
-
Cyber essentials
-
Yes
-
Cyber Essentials Certificate Number
-
F39d4c55-1d45-48f8-952c-ce119900b5cc
-
Cyber essentials plus
-
No
-
Cyber Essentials Alternative
-
In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
-
Other security certifications
-
No
Social value
-
Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
-
Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
-
Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
-
Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
-
Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
-
Mission: Build an NHS fit for the future
-
That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
-
Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
-
Actions to invest in the physical and mental health and wellbeing of the contract workforce
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at
jim.lester@consult-first.co.uk.
Tell them what format you need. It will help if you say what assistive technology you use.