Identity, endpoints, network, firewalls, virtualisation, storage, backup, and the security operations around them. Delivered hands-on by the consultant who currently runs infrastructure and security for a Premier League football club, and who has moved three organisations between Microsoft 365 tenants this year.
Current as of 30 September 2026 — reflects the 1 July 2026 Microsoft 365 pricing and packaging changes, the removal of seeded AI Builder credits on 1 November 2026, and the Information Commission taking over from the ICO on 30 September 2026.
Hybrid Active Directory and Entra ID designed as one identity, with the device estate managed from Intune whatever it runs. Zero Trust as a working configuration, not a slide.
Perimeter, segmentation and access control designed together. Multi-site estates with guest, corporate, operational and broadcast traffic kept apart and kept up.
On-premises platforms that still earn their place, run properly, with a clear-eyed view of when to renew, migrate or move a workload to Azure.
Visibility first, then the controls and the paperwork that prove them. Built for organisations that have to pass an assessment, not just say they are secure.
Moving between tenants, merging several into one, or giving a business unit its own administration inside a shared tenant, with mail flow, devices and users landing where they should.
Backups that have been restored from, not just reported on. Offsite copies, immutable storage where it matters, and a recovery plan someone has actually rehearsed.
Copilot surfaces every file a user can already open. Custom agents inherit whatever permissions the service account has. Graph integrations only work when identity is tidy. None of it forgives stale SharePoint permissions, an unpatched firewall or a tenant nobody has looked at since it was set up.
That is why the infrastructure and security work comes first, and why it is done by the same person who then builds the AI on top. There is no handoff between a security consultant and an AI consultant, because they are the same consultant.
See how that plays out in practice in our case studies: a Premier League club, a London hotel group and a modular buildings manufacturer.
Switch configs, firewall policies, tenant settings, backups and licences read first-hand. You get a written view of what is there, what is missing and what is exposed.
A plan sized to your budget with the trade-offs spelled out: renew or migrate, cloud or on-premises, what to fix now and what can wait a year.
Phased cutovers with rollback plans, runbooks and handover documents. Work scheduled around your busy periods, not ours.
A standing engagement as your infrastructure and security lead, or a clean handover to your in-house team or MSP with the documentation to run it.
Book a free discovery call. Bring your network diagram, your tenant, or just the list of things that keep you up at night. You'll get a straight view of what needs fixing, in what order, and what it will cost — no obligation, no vendor theatre.