Search HAI Consulting
Find consulting services, industry guidance, work examples and practical resources across the site.
Search results
27 results found. Search results for “retention”.
Consulting
Cloud services
Azure and AWS design, migration and review for Canadian organizations: landing zones, identity, networking, backup and cost visibility.
ServiceCybersecurity assessments
Assess current security controls, evidence and ownership, then turn verified findings into a prioritized and operationally realistic improvement plan.
ServiceFirewall policy review
Review firewall policy intent, effective access, ownership and observed use before making bounded cleanup or risk-reduction changes.
ServiceMicrosoft 365 security and administration
Microsoft 365 security and administration for Canadian organizations: Entra ID, conditional access, mail security, sharing, Intune and licensing.
Starter engagementRansomware Recovery Readiness Review
A focused review of whether priority services, identities, clean administration and backups can support a defensible recovery decision.
ServiceResilience and recovery
Test whether critical services can be restored, identify fragile dependencies and leave recovery evidence that operators can use during an outage.
ServiceSecurity policy and governance
Write or review security policy that matches how your organization actually operates, with each statement mapped to the control meant to enforce it.
Resource library
Security logging coverage and retention worksheet
Map the events needed to investigate material incidents, verify collection and retention, and expose blind spots before an alert or outage.
ArticleSecurity logging coverage and retention: design for the investigation
Build a logging plan from investigation questions, evidence paths and response ownership instead of collecting high-volume data without a use case.
ArticleMicrosoft 365 backup: what native recovery will and won't restore
Microsoft 365 recycle bins and retention are not a backup. What native recovery covers, where it stops, and how to plan restores you can rely on.
ArticleProxmox Backup and Recovery: Design for a Restore, Not a Green Job
Design Proxmox backups around a proven restore rather than a green job: retention, isolation, verification and the failure modes that matter.
ArticleDeploying Cloudflare WAF Without Breaking Production
Deploy Cloudflare WAF without breaking production: staged rollout, rule tuning, false-positive handling and a rollback you have actually tested.
ArticleDNS Migration With a Rollback Plan That Can Actually Work
A DNS provider migration runbook covering zone discovery, TTLs, DNSSEC, delegation, split authority, validation and the time-dependent realities of rollback.
ResourceFirewall change and rollback record
Plan, approve, test, and close a firewall change with the business reason and rollback path in one record.
ResourceIncident-readiness questionnaire
Find the practical gaps that can slow decisions, communications, containment, evidence handling, and recovery during a cyber incident.
Knowledge topicInfrastructure
Design infrastructure around service dependencies, recoverability, administrative boundaries and changes that operators can verify.
KnowledgeKnowledge from the field
Cybersecurity, network, infrastructure, Cloudflare, Palo Alto, Cisco and practical AI guidance.
ArticlePalo Alto policy review: find risk before adding another rule
Review rule order, application visibility, profiles, logging, and stale access before expanding a PAN-OS policy base.
ResourcesPractical security and infrastructure templates
Templates for firewall changes, security assessments, incident readiness and recovery tests.
ResourcePrivileged access and emergency access review
A worksheet for reviewing privileged access: who holds it, why, when it was last confirmed, and what evidence supports keeping it.
ArticleRansomware Recovery Readiness: A Checklist You Can Prove
A practical checklist for proving ransomware recovery works: what to test, what evidence to keep, and which assumptions usually fail under pressure.
Knowledge topicResilience
Plan recovery around services, identities, clean administration, dependencies and evidence—not backup-job status alone.
ArticleSecure AI-Agent Access to Infrastructure: Put Authorization Outside the Model
How to give AI agents infrastructure access without losing control: scoped credentials, approval paths, audit trails and reversible change.
ResourceSecurity assessment scoping and evidence worksheet
Define what an assessment must answer, gather evidence consistently, and separate verified findings from assumptions.
Knowledge topicSecurity Operations
Operate privileged access, third-party connections and security evidence as owned lifecycles with tested recovery and shutdown paths.
ResourceThird-party remote access review
Review vendor and partner access from business purpose through identity, network path, session evidence, expiry, and safe removal.