Microsoft 365
4 areas covered
- SharePoint and OneDrive scoped to engagement teams
- Guest and associate access reviewed at closeout
- MFA, Conditional Access, and administrator controls
- Managed endpoint protection on supported devices
Protect client work across every engagement
Consultants move between client teams, locations, and deadlines. Each engagement needs clear access, secure devices, controlled sharing, and current evidence when a client asks how its information is handled.
Security Stack
A finished engagement should not leave access behind
Client requirements vary, but the underlying controls are familiar: limit access, protect the account and device, record what happened, and close access when the work ends.
Engagements
Separate access by client
Where client material lives in Microsoft 365 or Google Workspace, access is limited to the people assigned to the engagement. External links and inherited permissions are reviewed instead of left open by default.
Associates
Give external contributors a defined account
Associates and subcontractors use named accounts with access limited to the work they need. Their sessions and permissions can be removed without affecting the rest of the engagement team.
Devices
Protect work away from the office
Supported laptops and phones in scope receive managed endpoint protection, encryption, and security updates. The controls follow the device and account whether work happens at home, at a client site, or while travelling.
Sign-ins
Watch for account takeover
Multi-factor authentication, administrator controls, and sign-in monitoring reduce the reach of a stolen password. Suspicious sessions and inbox-rule changes are investigated through the agreed response process.
Evidence
Keep control records current
Scheduled reporting documents the security controls Teclara operates. The consulting firm uses that evidence when it answers a client questionnaire, RFP, insurance application, or internal review.
Closeout
End access when the engagement ends
Accounts, active sessions, external links, and guest access are reviewed at closeout. Client retention, return, and destruction requirements remain part of the firm’s contract and records process.
Business Value
What the program does for your firm.
The program gives the firm controlled client access, a repeatable closeout process, and current records when a buyer or insurer asks how security is handled.
01
Control each engagement
- Client folders limited to the people assigned to the work
- Associate, guest, and sharing access reviewed at closeout
02
Support distributed work
- Managed protection on supported devices used away from the office
- Sign-in and sharing policies that follow the account and device
03
Answer with evidence
- Written records for the controls Teclara operates
- Quarterly reviews that identify gaps, actions, and ownership
What stays yours
The consulting firm remains responsible for its client contracts, questionnaire answers, incident-notification decisions, and retention or destruction commitments. Teclara operates and documents the security controls in scope. Client systems, project applications, source repositories, and other platforms are included only when named in the engagement.
One managed program that covers the controls below.
Managed Security & Compliance covers the full stack: monitoring, endpoint protection, email security, backup, patching, and platform administration on Microsoft 365 or Google Workspace.
- Human-led monitoring
- A 24/7 security team detects and responds to threats, not just an automated alert.
- Endpoint protection
- Managed detection and response on supported staff devices placed in scope.
- Email and fraud protection
- Controls for phishing, impersonation, and invoice fraud, with suspicious activity reviewed.
- Cloud backup and recovery
- Microsoft 365 and Google Workspace backed up daily, with tested restores.
- Login monitoring
- Cloud sign-ins watched for account takeover, with response following an agreed process.
- Patching and vulnerability management
- Systems patched on a defined schedule, with known weaknesses prioritized by risk.
- Security awareness training
- Ongoing training and simulated phishing to keep the team sharp.
- Tenant configuration
- Microsoft 365 or Google Workspace settings reviewed and updated against the security baseline.
Platform Expertise
Secure configuration for Microsoft 365 and Google Workspace.
We configure the identity, sharing, email, and retention controls your firm relies on, then keep them under review.
Google Workspace
4 areas covered
- Shared drives scoped to engagement teams
- External links and guest access reviewed at closeout
- MFA and administrator access controls
- Admin and sign-in reporting retained as evidence
Included
Configuration updates are part of the service. When our security baseline changes, your environment is updated without a separate project fee.
Frequently asked questions.
How does the program handle a changing team?
Coverage follows the supported users and devices placed in scope. New accounts use a defined onboarding process, while departing staff, associates, and guests have accounts, sessions, and access removed through documented offboarding. Timing and responsibilities are agreed before the service begins.
Can consultants work securely from client sites?
Yes. Account controls and managed endpoint protection can follow supported devices outside the office. The exact coverage depends on whether the device is enrolled, which sign-in policies are licensed, and whether a client network or application imposes its own requirements.
Can you help with a cyber insurance application or renewal?
Yes. We map the controls in scope to the questions on the insurer form and provide current evidence for covered controls. Requirements vary by insurer and policy, so the work supports the application but does not guarantee approval or coverage.
What happens when a security alert fires outside business hours?
The security team reviews alerts and follows the agreed response and escalation process around the clock. The action available depends on the system, access, and authority placed in scope, so those boundaries are documented before monitoring begins.
Can you help with client security questionnaires?
We provide written evidence for the controls Teclara operates, such as sign-in policies, device coverage, monitoring, backup, access reviews, and response records. The consulting firm remains responsible for its questionnaire answers, client commitments, and any supporting legal or compliance interpretation.
Client Feedback
What a client says about working with us.
“Teclara materially improved both our operational responsiveness and our security posture.”
E.C.
Senior Leadership, GTA Consulting Firm
Led by Wadhah Hussain, Teclara's founder
20+ years enterprise IT · Big Four alumnus · Microsoft & Google Cloud specialist
Review the controls before the next client questionnaire
We review sign-ins, administrator access, mail flow, device coverage, sharing, and backup in your Microsoft 365 or Google Workspace environment. You receive written findings and priorities that your team can use when it answers a client review.