Identity and privileged access
Review MFA, Conditional Access, administrator roles, guest access, and accounts that need special handling.
M365 security & Zero Trust
Make Microsoft 365 access work the way you intend.
Cocha helps your IT team turn identity, device, and data controls into a practical security baseline. Start with the gaps that affect your users today, then build a phased plan for stronger access and governed AI.
Free starting point · Written findings · No obligation to purchase
Controls built around the work your team needs to do.
Devices and monitoring
Check how device management, endpoint protection, and available logs support your access policies and response process.
Data and AI access
Connect access decisions to SharePoint and Teams sharing, sensitive information, approved AI tools, and their connected sources.
A focused starting point across five areas.
The free M365 Zero Trust Snapshot is a 60-minute working session around your current controls and priorities. We agree on the evidence and scope when scheduling, so your team knows what to prepare.
M365 configuration
Selected tenant settings and available baseline reports.
Identity
Authentication, administrator protection, and access-policy questions.
Endpoints
Device coverage and the conditions used to allow access.
Network boundaries
A discussion of access paths and segmentation relevant to your environment.
Data and AI governance
Sharing, permissions, approved tools, and ownership of exceptions.
The free Snapshot is not a complete tenant audit, penetration test, comprehensive network assessment, or regulatory certification. Assessment and remediation are separately scoped.
What you take away
Prioritized findings
What the supplied evidence supports, what is unverified, and which issues need closer investigation.
A phased next step
Suggested priorities and dependencies your IT team can use to decide what to address first.
A findings review
A discussion with your team to confirm owners, open questions, and whether deeper assessment or remediation is needed.
Know what to prepare.
Bring your M365 or identity administrator and security lead, a summary of your environment and licensing, and the access questions you want to resolve. Share agreed reports through a secure method; do not send credentials through the request form.
Where appropriate, we can agree on use of CISA’s SCUBAgear to assess selected M365 configuration baselines. Your administrator reviews the tooling, dependencies, permissions, and consent requirements before it runs. Its reports support the review; they do not replace hands-on validation or certify your organization.
Senior practitioners, alongside your team.
Steven R. Combs brings 30 years in IT and 15 years working with law firms. We work with your internal IT and security teams or MSP, with responsibilities agreed before implementation.
Gabriella San Miguel coordinates project activity, scheduling, and business operations.
We aim to respond within 4–8 business hours, Monday–Friday, 8 AM–5 PM Central.
When you need help acting on the findings.
The free Snapshot helps establish priorities. Paid assessment, implementation, and ongoing advisory are separate engagements, with scope, deliverables, and responsibilities agreed in advance.
1. Assess the gaps
A paid assessment can examine policy behavior and evidence beyond the Snapshot’s selected inputs.
2. Pilot the changes
Agree on test users, emergency access, exceptions, and recovery steps before enforcing access-policy changes.
3. Validate and hand over
Check the agreed scenarios, document the configuration, and establish responsibility for ongoing reviews.
Already have a defined project? Request a project conversation.
Questions before you begin
Does this require us to replace our IT provider?
No. We work alongside your internal team or MSP and agree on responsibilities before deeper work begins.
Will you change policies during the free Snapshot?
The Snapshot reviews agreed inputs and priorities. Production configuration changes are separately scoped and approved.
Is SCUBAgear required?
No. We confirm fit and evidence needs first. Tooling is optional and subject to your administrator’s review and consent.
When will we receive findings?
We confirm the delivery schedule when arranging the session, based on the agreed inputs and your team's availability. We aim to respond to requests within 4–8 business hours, Monday–Friday, 8 AM–5 PM Central.