A meeting to review your access management and internal processes. Avepto then hands you concrete recommendations, ranked by priority.
The problem
You don’t need to be targeted by a sophisticated hacker. Most incidents come from simple things, a forgotten account, a shared password, a right granted then never revoked. Here are the six situations we see most often.
Their account was never closed. They can still log into your email or your files, from home, from anywhere.
Full access inventory. On every departure, a documented procedure revokes each account the same day.
The « admin » account everyone uses. If one of them loses it, everything is exposed. And no one knows who did what.
Each colleague has their own login. Actions are tracked. A departure no longer paralyses the team.
If it’s guessed, stolen or found online, anyone can walk in. Without a second check, nothing stops them.
A stolen password is no longer enough to get in. Logging in requires a second confirmation, on the employee’s phone.
Your team often reuses passwords between work and personal sites. A leak elsewhere exposes you here.
A team-shared password manager. Each service gets a unique credential, generated and stored securely.
An intern with access to HR folders. A salesperson seeing the books. Rights granted « just in case » and never reviewed.
Each colleague only sees what their role requires. Permissions are reviewed yearly and corrected when they drift.
Every hire, you improvise. Every departure, something is forgotten. The list of what to do is still to be built.
One checklist per profile. On arrival, every access is in place. On departure, everything is revoked the same day.
Here is exactly what Avepto does, in order, to take back control of your access. Each action produces a written record that’s yours to keep.
See everything that exists, with no blind spots.
Email, applications, remote access, shared files. Including the ones you had long forgotten.
Everyone keeps the rights their work needs. Those that no longer serve are removed, with your agreement.
Cut what’s useless, harden what remains.
Former employees, interns, departed contractors. Their access is closed cleanly, with a report.
Beyond the password, a confirmation on the phone. This blocks almost every intrusion attempt.
For example: accounting from the office, or only from Switzerland. You decide, we configure.
Each person needing elevated rights gets one in their name. The shared admin account goes away.
Spot the abnormal, frame the movements.
An unusual country, an odd hour, several failures in a row. We are alerted, and we tell you.
What to do at hire, at transfer, at departure. Everyone knows what to do, and when.
Leave you a clear record and clear priorities.
Who holds which access, which rules apply, which exceptions exist. One readable document, yours to keep.
Ordered from most to least urgent. With what each point changes for you, and how long it takes.
A scenario we see often
The same password at home and at work, a leak on another site, a login attempt. What changes is what they run into.
An employee uses the same password for their personal mailbox and their work mailbox.
Nothing stops them. One password holds both accounts.
They create an account on an external service with their work address, reusing their usual password.
That reuse creates a dependency on a service you do not control.
The external service is compromised. The credentials appear in a known breach.
Without identity monitoring, this can go unnoticed.
Someone tries that password on the work mailbox.
If the password is enough on its own, the sign-in can succeed.
The attempts come from an unusual context, and they repeat.
They may blend into ordinary sign-ins.
The compromise may only be discovered after it has been exploited.
Frequently asked questions
If yours isn’t here, just ask during the audit.
Avepto maps out who has access to what across your company: accounts, passwords, files and business applications. We then close access that should no longer exist, protect what matters, and hand you a clear, up-to-date view of your digital identities. You keep the decisions, we handle the setup and the ongoing follow-up.
Because an orphaned account is a door no one is watching. Its password may be guessable or exposed in a data leak, and whoever finds it can reach your email and files in that person’s name. With no one monitoring the account, the intrusion can go on for months before anyone notices.
Multi-factor authentication (MFA) adds a second proof of identity to the password: a six-digit code or a notification to approve on the employee’s phone. That confirmation takes two seconds but blocks almost every intrusion attempt using a stolen password. It’s the single most effective security measure an SME can switch on.
No, and that’s our first concern. Multi-factor authentication (MFA) only triggers in risky situations: a new device, an unusual sign-in location. Day to day, your team barely notices a difference. The goal is more security, not more friction in their work.
The audit comes first. The full identity diagnostic then takes five to ten days depending on the size of your company. The remediation phase usually runs two to six weeks, depending on what we find. Your business carries on as normal throughout.
The services most often deployed alongside this one, and the field notes published by our specialists.
Next step
We meet to take stock of your access: who gets in, with which rights, under which processes. You leave with concrete recommendations. You choose what happens next, no commitment.