Access inventory
Who has access to what, across cloud platforms, shared drives, finance systems, and administrative portals.
Services
Access Control & Permissions
Access control is the discipline of making sure each person can reach exactly what their job requires, and nothing else. In most small businesses access accumulates: people change roles, contractors come and go, and permissions are added but never removed.
Scope
What the work covers
Least-privilege design
Roles defined by what the job needs, so access is granted by role rather than by request.
Permission review
A recurring review with a named owner, because access drifts the moment it stops being checked.
Offboarding controls
A written, testable sequence for removing access when somebody leaves, including shared credentials and third-party tools.
Privileged accounts
Identification of administrator and service accounts, and reduction of standing privilege where it is not needed.
Process
How the engagement runs
STEP 01
Map
Build the current access inventory, including the systems nobody lists on the org chart.
STEP 02
Design
Define roles and the access each one carries.
STEP 03
Remediate
Remove standing access that no role justifies, starting with former staff and contractors.
STEP 04
Operationalize
Set the review cadence and the offboarding runbook with a named owner.
Fit
Signals you need this
- A former contractor might still have access and nobody can confirm either way.
- Several people share one administrator login.
- Access is granted by asking a colleague rather than by a defined role.
- Offboarding is a verbal process.
FAQ
What is access control and permissions management?
Access control and permissions management is the design and maintenance of least-privilege access: role-based configuration so each person reaches only what their job requires, recurring permission reviews, and offboarding controls that remove access reliably when someone leaves.
What is least privilege?
Least privilege means granting the minimum access a role needs to do its work, and nothing beyond it. It limits how far an attacker can move if one account is compromised.
How often should permissions be reviewed?
A recurring review with a named owner matters more than the exact interval. Quarterly is workable for most small teams, with an immediate review whenever someone changes role or leaves.
How does PikeShield pricing work?
PikeShield scopes each engagement to your environment, team size, and risk profile, so pricing is tailored rather than one-size-fits-all. The first step is a free security assessment, after which PikeShield outlines priorities and recommended next steps.
How do I get started?
Request a free security assessment through the contact form, email daniel@pikeshield.com, or call +1 (768) 300-2261. PikeShield will follow up to discuss your risk profile and next steps.