Approximately 250,000 Users
National Microsoft 365 Transformation
ANDY KEMP CONSULTING
Microsoft 365 Security & Identity, Made Clear.
Microsoft MVP · Identity & Access
Security, identity, tenant migration, Copilot readiness and modern workplace consulting for organisations across the UK and beyond. Remote-first, with onsite support by arrangement.
Prefer a direct conversation? Call +44 131 376 1802
Experience at scale
15,000 Users
Enterprise MFA Adoption Programme
23 Organisations
One Tenant and Namespace
Commercial and GCC High
Cross-Cloud Migration Experience
FIND THE RIGHT STARTING POINT
What are you trying to do?
Jump straight to the service area that matches the outcome you need, from security posture through to migrations, endpoints and new business foundations.
Reduce Risk Strengthen Microsoft 365 security and identity Review privileged access, Conditional Access, governance and Microsoft security controls. Move Tenants Plan a tenant migration or major change Structure discovery, coexistence, validation and business change before delivery starts. Adopt AI Prepare for Microsoft 365 Copilot Assess data exposure, governance, use cases and rollout readiness before licensing takes over. Modernise Work Improve endpoints and remote access Design secure Windows 365, Azure Virtual Desktop, Intune and hybrid work foundations.
Also: Cloud transformation Startups & new tenants Business startup & digital presence Associate services All services
Source tenant Microsoft 365
UK Commercial
UK Commercial
Target tenant Microsoft 365
GCC High, US
GCC High, US
Exchange OnlineSharePoint OnlineOneDriveTeams
Target identity foundationMicrosoft Entra Domain Services
CASE STUDY: CROSS-CLOUD MIGRATION
UK to US
A full tenant move to GCC High
Supported a UK organisation in the US defence supply chain moving from a UK Commercial Microsoft 365 tenant to a US GCC High environment, helping meet its US defence regulatory and contractual requirements.
Scope
Exchange Online, SharePoint Online, OneDrive for Business, Teams and a new Azure-hosted directory services foundation.
Delivery
Planned migration waves, coexistence, validation and cutover using MigrationWiz and ShareGate.
Outcome
Delivered the core collaboration estate into a GCC High target environment with workload-specific validation.
CLIENT FEEDBACK
What Clients Say
Client names are withheld for confidentiality.
Andy kept us informed at every stage of our move to GCC High. He raised potential risks before they became problems, worked calmly through the issues that came up along the way, and reassured us whenever we thought something had gone wrong. His approach was detailed and thoughtful, and throughout the engagement we felt our best interests were in safe hands.
ABOUT ANDY KEMP CONSULTING 
Independent. Experienced. Focused on Results.
I help organisations across the UK and internationally get more from Microsoft 365 securely. Whether you need strategic guidance, hands-on delivery or expert support, you will work directly with an experienced M365 specialist who understands both the technology and the outcome you need. Remote delivery is available worldwide, with onsite support by arrangement where appropriate.
More About Andy- Microsoft Certified Cybersecurity Architect Expert
- Microsoft Cloud & AI Partner
- 30+ Years in IT
- Microsoft MVP — Identity & Access, Microsoft Certified Trainer, Speaker and Author
TOOLS & FRAMEWORKS
Tools, Frameworks and Writing
The tooling, delivery models and writing that sit behind the consultancy work.
Tools
All tools- Live Tenant Audit Read-only Microsoft 365 tenant audit with a scored report and roadmap.
- Free PIM Role Designer Design Entra ID PIM settings by Trust Level, from your own tenant data.
- New Break-glass Account Builder Emergency access accounts designed properly: custody, alerts, testing and a runbook.
- Free Auth Guide Plain-English passkey and MFA set-up and recovery guide for users.
- In development TenantLift Tenant-to-tenant migration orchestration with less manual effort and better visibility.
- In development TenantIQ Tenant intelligence and configuration visibility across Microsoft 365.
Frameworks
All frameworks- Framework Secure Endpoint Framework Design, implement and govern secure Microsoft-managed endpoints.
- Framework Privileged Path Framework Identity, access, isolation and governance for privileged access.
- Framework Microsoft 365 Security Assessment Configuration data turned into prioritised recommendations and a roadmap.
Latest writing
The blog- 6 Nov 2026 Scan to Save: A Digital Business Card People Save in One Tap Scan to Save is a free digital business card from Andy Kemp Consulting: people scan your QR code and save you to their contacts in one tap, with your photo,...
- 5 Nov 2026 Two Exchange Servers, One IP Address I have a production Exchange server and a lab one, and a single public IP address. Both want port 443. HAPMan is the free tool I built to route them by name,...
- 5 Nov 2026 Win11 Image Prep: From PowerShell Script to Windows App Win11 Image Prep builds Windows 11 install media with your drivers already in it: a free Windows app that grew out of a PowerShell script for the Surface Lap...
Ready to Make Microsoft 365 Change Clearer?
Start with a practical conversation about your security, identity, migration or endpoint requirements.