Scope and intake
We agree the systems in scope, the time box and the data-handling terms under an NDA, using anonymised inputs.
Identity security advisory
Know what privileged access exists in your environment.
For CISOs and business owners.
Centribolt is an independent, vendor-neutral Identity Security Posture and Transformation Advisory. We compare what your organisation believes about its privileged access with what the environment shows, and help you close the gap.
A mutual non-disclosure agreement (NDA) comes first if you want one.
Privileged access management (PAM) governs the accounts that can change systems, data and other accounts. Accounts that are not recorded, owned or reviewed are a common pattern on servers and devices.
The gap between belief and evidence
Illustrative example. Not drawn from any client.
Most organisations hold a list of privileged accounts and a view of who reviews them. The environment often shows something different. We start from what is recorded, check it again in the environment, and align the evidence.
What the register says
- Domain administrators: owner and review date recorded
- Vendor-managed accounts: listed
What the environment shows
- Domain administrators: matches the register
- Vendor-managed accounts: matches the register
- Local administrator accounts on servers: not in the register
- Service accounts: no owner recorded
- Accounts of people who have left: still enabled
How the review works
The Review, in six stages
Current-state capture
We record settings, configurations, policies and processes as found, each with its source.
Gap finding
We compare what the organisation believes with what the evidence shows, and state the risk in plain language with a proposed owner.
Utilisation check
We compare the capabilities already owned with what is switched on and in use. Closing that gap can be a low-effort improvement.
Fix design
We design a practical, low-effort fix using tools already in place, with a runbook that states who runs it, how often, and what happens if that person is unavailable.
Handover
You receive the evidence pack, prioritised actions, named owners and a review date.
Plain-language reading
Free to read
Practical checklists on privileged access evidence and ownership.
Describe the problem
We can begin under an NDA. Tell us the problem, the size of the environment in anonymised terms, and your timeline.