Azure Local security hardening
Azure Local ships with a strong default security baseline. We check that it is still in force, close the gaps around it and document who can do what.
Scope of the work
- Check the security baseline and drift control settings
- Review application control policy and exceptions
- Check volume encryption and where recovery keys are kept
- Review administrative accounts, Azure role assignments and secret rotation
- Segment management, storage and workload networks and review firewall rules
- A hardening report mapped to the settings checked
- Corrected configuration with each change recorded
- An access model document: who holds which role and why
Billed at $150.00 per hour. Ask Keith for an estimate.
What we check first.
Baseline drift
A setting changed to fix one problem often stays changed. Drift control exists for this; we confirm it is on.
Recovery keys
Encryption helps only if the recovery keys are stored somewhere that survives the cluster.
Deployment accounts
The account used for deployment often keeps more rights than operations needs. We reduce it.
Four steps, written down.
A call with Keith
You describe the goal, the estate and the deadline. Keith turns it into a written scope with an hour estimate at the hourly rate.
A written design by Gus
Gus reviews the environment and gives you a written design with each decision and its reason.
Hands-on implementation
Gus implements in your tenant and your racks, remotely or on site, with every change logged as it is made.
Documents and a named contact
You receive the as-built record and the runbooks. Keith stays on as your account and project manager.
Asked before every engagement.
Does hardening break workloads?
It can if application control blocks something that was running. We test in audit mode first and agree exceptions before enforcing.
Can you map this to a compliance framework?
Yes. Tell us the framework and we map the checked settings to its controls in the report.
What does the consulting cost?
Consulting is billed at $150.00 per hour. Keith sends a written hour estimate after the scoping call, and work starts when you approve it.
Often scoped together.
One rate. Two people.
Consulting is billed at $150.00 per hour. Keith runs sales, project management and your account. Gus does the architecture, the design and the implementation.
per consulting hour, for every consulting service