Practical security. Audit ready.
Security without the fear.
I’m Jordan. I’ve spent 12 years running the controls auditors ask about. These are the pieces I put into your company myself. Nothing hidden, nothing extra.
Book a free consult
What’s in the box
MFA
Conditional access
Admin accounts
Device baseline
Platform config
Alerting
GRC platform
Data protection
Policies and answers
Start with a free consult
Book a free consultFoundation
- 1
1x
Start
Consult and GRC platform
A free call, then your risks and controls in one platform, so progress is reportable from day one.
- 2
11x
5x
Device
Device baseline
Every laptop meets the same settings before it touches company data.
- 3
7x
10x
Platform
Platform configuration
Microsoft 365 or Google Workspace set up the way it should be, not the way it shipped.
Ways in
- 4
2x
Identity
MFA
Everyone signs in with a second factor, phishing-resistant for the people attackers target.
- 5
1x
Identity
Admin accounts
Admin rights move to separate accounts used only for admin work.
- 6
6x
Identity
Conditional access
Unmanaged devices and unusual sign-ins get challenged before they reach the door.
Finish
- 7
9x
8x
5x
Platform
Alerting
Risky sign-ins and new forwarding rules reach a person, not a log.
- 8
1x
Data
Data protection
Sharing, labelling and retention set so company data stays where it belongs.
- 9
1x
1x
1x
Audit ready
Policies and answers
Policies written from the controls you really run, and answers ready before anyone asks.
Finished build
Built secure. Ready for the audit.
Device, identity, platform and data, every piece in place and in the right order. Done by the person you talk to on the first call.
Book a free consult
4Two ways I help
Microsoft 365 or Google Workspace hardening
Four areas, in the tools you already pay for: device, identity, platform and data.
- Identity
- MFA
- Admin accounts
- Conditional access
- Device
- Device baseline
- Platform
- Platform configuration
- Alerting
- Data
- Data protection
Ongoing vCISO
Once the base is solid, I stay on as your security lead. When an auditor, a customer or an insurer asks, the answers are ready.
- Ongoing
- GRC platform
- Policies
- Questionnaire answers
- Audit support
The person who does the work
My career has been spent inside real IT environments: setting up accounts, locking down laptops, and sitting across from the auditor. Outbound Strategies is my own practice.
When you hire me, you get me. No handoff to a junior team, no rotating consultants. The person on the first call is the person in your tenant.
Tell me what is pushing you
A deal, an audit, an insurer, or a hunch. I will tell you where I would start, even if the answer is that you do not need me yet.