Professional services
Accounting, law, architecture, engineering and agency firms where the work product is knowledge and the tolerance for downtime is close to zero.
What tends to bite
- Security questionnaires arriving attached to contracts
- Document access that must be tight without slowing billable work
- Seasonal load — filing periods, closings, bid deadlines
- Partners and principals who each have their own way of working
Composite example
Composite example: a 90-person firm across three offices asked us to answer a client’s security questionnaire. Checking who could sign in turned up eleven admin accounts for four IT-ish staff, and two former employees who could still log in.
Usual start: Security Foundation, then ongoing IT support