Security & Identity
Strengthen Microsoft 365 with practical identity-first approaches, privileged access governance and Zero Trust principles.
Learn more about Security & Identity ANDY KEMP CONSULTING
Microsoft 365 Security & Identity, Made Clear.
Microsoft MVP · Identity & Access
Security, identity, tenant migration, Copilot readiness and modern workplace consulting for organisations across the UK and internationally. Remote-first delivery is available worldwide, with onsite support by arrangement where travel and engagement scope make sense.
Prefer a direct conversation? Call +44 131 376 1802
Security First
Zero Trust aligned strategies and frameworks
Identity Focused
Protect, manage and govern identities at scale
Migration Experts
Tenant-to-tenant migrations delivered properly
Automation Driven
Purpose-built tools that reduce risk and effort
Proven Experience
Decades of Microsoft delivery and architecture experience
FIND THE RIGHT STARTING POINT
What are you trying to do?
Jump straight to the service area that matches the outcome you need, from security posture through to migrations, endpoints and new business foundations.
Reduce Risk Strengthen Microsoft 365 security and identity Review privileged access, Conditional Access, governance and Microsoft security controls. Move Tenants Plan a tenant migration or major change Structure discovery, coexistence, validation and business change before delivery starts. Adopt AI Prepare for Microsoft 365 Copilot Assess data exposure, governance, use cases and rollout readiness before licensing takes over. Modernise Work Improve endpoints and remote access Design secure Windows 365, Azure Virtual Desktop, Intune and hybrid work foundations.
HOW I HELP
Services That Drive Secure Change
AI & Copilot Adoption
Adopt AI in Microsoft 365 securely with readiness assessment, governance design and practical adoption planning.
Learn more about AI & Copilot AdoptionMigrations & Change
Plan and deliver tenant migrations securely with structured discovery, validation and change management.
Learn more about Migrations & ChangeModern Workplace
Create secure, productive endpoint experiences with Windows 365, Azure Virtual Desktop and Microsoft Intune.
Learn more about Modern WorkplaceCloud Transformation
Move to Microsoft cloud services with structured discovery, target architecture and clear transformation roadmap.
Learn more about Cloud TransformationStartups & New Tenants
Build secure, scalable Microsoft 365 foundations correctly from day one without legacy constraints.
Learn more about Startups & New TenantsBusiness Startup & Digital Presence
Launch and support a small business with a professional website, hosting, identity and secure Microsoft 365 foundations.
Learn more about Business Startup & Digital Presence EXPERIENCE AT SCALE
Experience at Scale
Enterprise architecture and delivery experience across national healthcare, sovereign cloud, public sector, regulated industries and global Microsoft 365 environments.
Approximately 250,000 Users
National Microsoft 365 Transformation
15,000 Users
Enterprise MFA Adoption Programme
23 Organisations
One Tenant and Namespace
Commercial and GCC High
Cross-Cloud Migration Experience
CASE STUDY: MFA ADOPTION
15,000
Making MFA rollout progress visible
A custom operational tool supported an enterprise MFA rollout by recording enrolment status, highlighting outstanding cohorts and producing clear daily and weekly progress reporting.
Challenge
Move beyond fragmented tracking and give delivery, support and programme teams one dependable view of rollout progress.
Approach
Built a focused tracking tool to surface enrolment status, adoption trends and cohorts needing follow-up.
Outcome
Enabled targeted support and communications, with consistent progress reporting throughout the rollout.
Representative programme dashboardMFA rollout overview
Reporting active Rollout population15,000 users
Reporting cadenceDaily + weekly
Completed cohortsTracked
In-progress cohortsMonitored
Follow-up actionsPrioritised
Source tenant Microsoft 365
UK Commercial
UK Commercial
Target tenant Microsoft 365
GCC High, US
GCC High, US
Exchange OnlineSharePoint OnlineOneDriveTeams
Target identity foundationMicrosoft Entra Domain Services
CASE STUDY: CROSS-CLOUD MIGRATION
UK to US
A full tenant move to GCC High
Supported a UK organisation in the US defence supply chain moving from a UK Commercial Microsoft 365 tenant to a US GCC High environment, helping meet its US defence regulatory and contractual requirements.
Scope
Exchange Online, SharePoint Online, OneDrive for Business, Teams and a new Azure-hosted directory services foundation.
Delivery
Planned migration waves, coexistence, validation and cutover using MigrationWiz and ShareGate.
Outcome
Delivered the core collaboration estate into a GCC High target environment with workload-specific validation.
CLIENT FEEDBACK
What Clients Say
Client names are withheld for confidentiality.
Andy kept us informed at every stage of our move to GCC High. He raised potential risks before they became problems, worked calmly through the issues that came up along the way, and reassured us whenever we thought something had gone wrong. His approach was detailed and thoughtful, and throughout the engagement we felt our best interests were in safe hands.
ABOUT ANDY KEMP CONSULTING 
Independent. Experienced. Focused on Results.
I help organisations across the UK and internationally get more from Microsoft 365 securely. Whether you need strategic guidance, hands-on delivery or expert support, you will work directly with an experienced M365 specialist who understands both the technology and the outcome you need. Remote delivery is available worldwide, with onsite support by arrangement where appropriate.
More About Andy- Microsoft Certified Cybersecurity Architect Expert
- Microsoft Cloud & AI Partner
- 30+ Years in IT
- Microsoft MVP — Identity & Access, Microsoft Certified Trainer, Speaker and Author
TOOLS & FRAMEWORKS
Purpose-Built Tools and Practical Frameworks
Tooling and repeatable delivery models that sit behind the consultancy work.
Tools
All tools- Live Tenant Audit Read-only Microsoft 365 tenant audit with a scored report and roadmap.
- Free PIM Role Designer Design Entra ID PIM settings by Trust Level, from your own tenant data.
- New Break-glass Account Builder Emergency access accounts designed properly: custody, alerts, testing and a runbook.
- Free Auth Guide Plain-English passkey and MFA set-up and recovery guide for users.
- In development TenantLift Tenant-to-tenant migration orchestration with less manual effort and better visibility.
- In development TenantIQ Tenant intelligence and configuration visibility across Microsoft 365.
Frameworks
All frameworks- Framework Secure Endpoint Framework Design, implement and govern secure Microsoft-managed endpoints.
- Framework Privileged Path Framework Identity, access, isolation and governance for privileged access.
- Framework Microsoft 365 Security Assessment Configuration data turned into prioritised recommendations and a roadmap.
CURATED SERIES
Deep Dives Worth Starting With
Active series
Microsoft Global Secure Access
A practical deep dive into Microsoft Global Secure Access, Microsoft Entra Internet Access and Microsoft Entra Private Access. This series explores real-world architecture patterns, Zero Trust design principles, application publishing, fixed egress IP scenarios, privileged access use cases and lessons learned from implementation projects.
Active series
Authentication Assurance
A practical guide to modern authentication, passkeys and identity assurance for Microsoft Entra. Learn how to apply the right level of authentication to the right identities.
Active series
Privileged Access Workstations
A practical guide to building modern privileged access strategies, using Privileged Access Workstations, administrative environments and identity assurance controls to protect high-trust identities.
Latest insights
From the Blog
Source IP Anchoring with Private Network Connectors
Install a Microsoft Entra Private Network Connector, configure selected SaaS traffic through Private Access, and verify the public IP seen by the application.
Read postUnderstanding Traffic Forwarding and Advanced Diagnostics
Understand Global Secure Access forwarding profiles, investigate Tunnel and Bypass decisions, and test SharePoint and internet traffic with Windows Advanced...
Read postI Just Needed My Battery to Last
In this instalment of Building Again, I share how coding drains the batteries on my Mac and Surface devices, and how Windows 365 helps me continue across dev...
Read post FREE RESOURCE
See What a Microsoft 365 Tenant Audit Finds
Download a sample enterprise audit report covering security risk, migration readiness, compliance posture and prioritised recommendations. No sign-up needed.
Ready to Make Microsoft 365 Change Clearer?
Start with a practical conversation about your security, identity, migration or endpoint requirements.