Cybersecurity services
Identity and Access Management, MFA and Device Management for Microsoft 365
Attackers log in more often than they break in. BTI enforces MFA, controls who can sign in from where and on what device, removes everyday admin rights, and keeps a clean record of who has access to what.
Free cybersecurity assessment
No cost, no obligation. Business inquiries only. Already a BTI client? Use the dedicated support number assigned to your organization.
- ✓Over 40 years in business
- ✓ISO 27001 compliant
- ✓SOC 2 NOC/SOC
- ✓ISNetworld member
- ✓GSA contract holder (47QTCA21D00BA) · CMAS and TESMA contract awardee (California)
Built on the Microsoft stack you already own
BTI's standard client environment is Microsoft 365 with Microsoft Entra ID for identity and Intune for device management. We configure, monitor and document them so the licenses you pay for actually protect you.
What BTI manages
MFA everywhere it matters
MFA enforced for users wherever supported, and required for remote access, email and admin accounts. Legacy sign-in methods that skip MFA are blocked. Multifactor authentication is one of the controls cyber insurers ask about first.
Conditional access
Sign-in rules in Microsoft Entra ID based on user, location, device health and risk, so a valid password from an unknown device or country is not enough.
Device management with Intune
Company and approved personal devices enrolled in Intune with encryption, screen lock, update and compliance policies. Lost or stolen devices can be locked or wiped. Non-compliant devices can be blocked from company data.
Privileged access
Just-in-time, least-privilege access: day-to-day accounts run without local admin rights, and users submit an elevation request that is reviewed, approved and logged for audit. Admin accounts are separate, protected with MFA, and reviewed on a schedule. Least privilege applies across email, remote access and admin paths.
Joiner, mover, leaver
Documented onboarding, role changes and offboarding, so access is granted on day one and removed on the last day. Access reviews run on a schedule and are kept as evidence.
Password management
A business password manager with central administration and single sign-on (SSO), plus a password policy, so staff are less likely to reuse passwords and access can be removed in one place. Dark web credential monitoring is available through Cyber Watch.
Identity, the network and zero trust
Identity is half of zero trust. The other half is the network path. If you choose Microsoft's SASE path, Entra Internet Access and Entra Private Access (Global Secure Access) extend the same identity rules to internet and private app traffic. BTI also offers a Cisco path. Both are explained on Network Security & SASE.
Evidence you can show
- MFA and conditional access reports.
- Device compliance reports from Intune.
- Privileged account lists and access review records.
- Onboarding and offboarding tickets.
These feed your WISP and evidence controls and cyber insurance readiness.
Getting started
- Free assessment, including a Microsoft 365 MFA and admin account review.
- Itemized proposal per user and per device.
- Staged rollout: MFA and legacy sign-in blocking first, then conditional access and Intune enrollment, then privileged access changes.
- Ongoing management, monitoring and access reviews.
Frequently asked questions
We already have MFA. What else is there?
MFA is the start. Conditional access, blocking legacy sign-ins, device compliance and separate admin accounts close the gaps attackers use to get around MFA.
Do we need Entra ID P1 or P2?
It depends on the features you need. Conditional access needs Entra ID P1 or higher, and Microsoft's SASE add-on needs Entra ID P1. BTI reviews your licensing in the assessment.
Can Intune manage personal phones?
Yes, with app-level protection that separates company data from personal data, or full enrollment for company devices.
Will removing admin rights slow people down?
No. With just-in-time access, users submit an elevation request that is reviewed, approved and logged for audit, so work continues without standing admin rights.
Is this priced per user?
Identity and device management are itemized per user or per device. No price list is published.
Get a free cybersecurity assessment
Start with a free, credential-free pen test and a plain-language summary of where you stand.
Talk to the BTI IT team for your location during business hours: Los Angeles / Southern California 323-510-8003 · Chicagoland 312-492-2613 · Phoenix 480-272-8728.
Already a BTI client? Use the dedicated support number assigned to your organization.