Security built around how each sector actually works

Defender for Business, conditional access and Intune sit inside your licence, switched off. A single compromised mailbox turns into invoice fraud, still the most common way Kenyan SMEs lose money, and the most preventable.

We configure Business Premium or E3/E5 properly before recommending a new purchase, fix identity first with MFA and conditional access, and leave you a monthly checklist your team can run.

Dormant student accounts with valid credentials are the softest target on campus. Research grants carry security and data-residency clauses that usually surface during an audit, not before.

We tie Entra ID governance to your student information system so accounts expire when enrolment does, apply conditional access that tightens around admin and research data, and design Microsoft Purview labels with researchers instead of imposing them.

Beneficiary data, health status, displacement, casework, is some of the most sensitive personal data anyone handles, and the Data Protection Act 2019 treats much of it as sensitive. Cross-border transfer is a live legal question under both the Act and most donor agreements.

We map your nonprofit Microsoft licensing entitlement before spend, build Purview labels and retention around casework, and produce the records of processing and DPIAs a donor auditor will accept.

The Data Protection Act 2019 and the Computer Misuse and Cybercrimes Act both apply to public bodies. Legacy Active Directory and unsupported servers stay live because no one is willing to be responsible for retiring them.

We clean up Entra Connect and hybrid identity, document every configuration decision with a rationale that survives an audit, and sequence the highest-risk work to fit what your procurement cycle can actually deliver.

Boards are accountable for cyber risk under CBK cybersecurity guidance, yet most institutions can describe their tooling but not evidence their controls. SACCOs carry bank-like risk, member data and member funds, on an IT team of three.

We map controls to CBK guidance rather than a product brochure, build Microsoft Sentinel and Defender workbooks as the evidence layer for board and regulator reporting, and route risky sign-in and impossible-travel signals from Entra to the people investigating fraud.