Search HAI Consulting

Find consulting services, industry guidance, work examples and practical resources across the site.

Isometric set of site pages with a magnifier picking out the matching result.

Search results

16 results found. Search results for “multi-factor authentication”.

Consulting

Resource library

Emergency access accounts: the control that stops MFA from locking you out

Identity hardening adds dependencies as well as protection. How to configure emergency access accounts so a policy or a lost factor cannot lock you out.

Business email compromise: stopping payment fraud

Business email compromise turns a trusted email thread into a payment to the wrong account. The Microsoft 365 settings and payment checks that stop it.

Microsoft 365 backup: what native recovery will and won't restore

Microsoft 365 recycle bins and retention are not a backup. What native recovery covers, where it stops, and how to plan restores you can rely on.

Network segmentation for SMBs: a minimum viable architecture that can grow

A staged segmentation design for small and midsized businesses that contains compromise without creating an unmanageable firewall-rule maze.

Ransomware recovery readiness: a checklist you can prove

A practical checklist for proving ransomware recovery works: what to test, what evidence to keep, and which assumptions usually fail under pressure.

Azure migration: what to settle before moving servers

Before moving servers to Azure, map dependencies, settle identity, network and data residency, and agree rollback. A readiness checklist for Canadian SMBs.

Cybersecurity assessment scope: a buyer’s evidence checklist

Define the decisions, service boundaries, evidence, testing depth and deliverables that turn a cybersecurity assessment into an actionable plan.

Privileged access and emergency access review

A worksheet for reviewing privileged access: who holds it, why, when it was last confirmed, and what evidence supports keeping it.

Security logging coverage and retention worksheet

Map the events needed to investigate material incidents, verify collection and retention, and expose blind spots before an alert or outage.

Third-party remote access review

Review vendor and partner access from business purpose through identity, network path, session evidence, expiry, and safe removal.

Third-party remote access: control the whole connection lifecycle

Turn vendor and support access into an owned lifecycle with named identities, narrow paths, visible sessions, expiry and a tested shutdown method.

About HAI