Federal subcontracting & direct commercial engagementsDC metro on-site · Remote across the United States
info@cogniaccess.com
CogniAccess LLC Start a conversation

Small business

Identity security for small business — fixed-scope, fixed-fee.

CogniAccess's core practice is identity work for federal programs and the contractors that support them. These packages apply the same discipline to businesses running on Microsoft 365.

You don't need an enterprise identity program. You need the specific controls your insurer, your auditor, and your clients are asking about — implemented properly, with evidence. CogniAccess packages that work into fixed-scope engagements for businesses on Microsoft 365.

Book a scope call How it works

Fixed-fee package

Microsoft 365 Security Baseline

Your tenant, hardened to a documented standard: Conditional Access policy set, MFA enforcement, admin-role cleanup, secure configuration review.

Deliverable

  • The hardened tenant
  • A findings-and-fixes report you can show an insurer or auditor
Typical duration: 1–2 weeksTiers: 1–10 / 11–25 / 26–50 users

Fixed fee by user count, quoted after a short scope call.

Fixed-fee package

MFA & Passkey Rollout Sprint

Phishing-resistant sign-in for your whole team: passkeys/FIDO2 deployed, legacy methods retired, exceptions documented, staff enrolled with support.

Deliverable

  • Rollout completion report
  • Per-user authentication method status
Typical duration: 2–4 weeksFixed fee

Fixed fee quoted after a short scope call.

Fixed-fee package · per location

PCI Identity Package

For businesses that take cards: MFA on all access to payment systems and remote access, unique accounts, vendor-access controls — PCI DSS Requirement 8, implemented and documented.

Deliverable

  • Evidence file for your SAQ or QSA
Typical duration: 1–2 weeks per locationFixed fee per location

Fixed fee per location, quoted after a short scope call.

Fixed-fee package

Cyber-Insurance Readiness Check

Before your renewal application asks about MFA and access controls, know your answers. A short review of your identity posture against underwriter questions, a gap list, and a remediation quote for anything missing.

Deliverable

  • Readiness report with evidence artifacts
Typical duration: 1 weekFixed fee

Fixed fee quoted after a short scope call.

Ongoing

Identity Care Plan

Quarterly access reviews, joiner/leaver checks, policy drift review, and a standing evidence file — the controls above, kept true. Available after any engagement above.

Ongoing · quarterly review cycleMonthly, per user count

Monthly, quoted per user count.

How it works

Three steps, no hourly billing

1

Scope call (20 minutes)

We confirm fit and give the fixed fee. No hourly billing, no surprises.

2

Delivery

Scheduled work, mostly remote; DC metro on-site available.

3

Evidence handoff

You keep the report and artifacts; they're yours.

4

Kept true

The Identity Care Plan keeps the controls above in place with quarterly reviews and a standing evidence file.

Need the deeper practice behind these packages? See the full Services catalog and the fixed-scope products.

For managed service providers

CogniAccess — your white-label identity desk

Identity work — Entra ID hardening, Conditional Access, MFA rollouts, access reviews, orphaned service accounts — is specialized, bursty, and senior-staff hungry. When a client's cyber-insurance renewal or PCI audit turns on identity controls, CogniAccess handles it under your brand.

What CogniAccess does for MSP partners

  • Microsoft 365 / Entra ID security baseline — tenant hardening, Conditional Access policy set, secure score remediation, documented to evidence standard
  • Phishing-resistant MFA & passkey rollouts — FIDO2/passkey deployment with user enrollment support and fallback design
  • Identity governance — access reviews, lifecycle (joiner/mover/leaver) cleanup, privileged-access review
  • Non-human identity cleanup — service account and application identity inventory, ownership assignment, credential hygiene
  • Audit & insurance evidence — control evidence packs for cyber-insurance renewals, PCI DSS identity requirements (Req. 8), and client audits

How partnering works

  • White-label: deliverables carry your brand; client-facing sessions are introduced as your team
  • Fixed-fee per engagement, quoted after a short scope call — no retainer required to start
  • Non-circumvention, in writing: CogniAccess never sells around you to your clients — direct inquiries from a partner's client are routed back to the partner
  • Defined deliverables on every engagement: what was changed, what evidence was produced, what remains

Request a 20-minute partner call

Start with the scope call.

Write to info@cogniaccess.com with your platform, user count, and the deadline in front of you. CogniAccess LLC, Manassas, VA — serving the DC metro and remote clients across the United States.

info@cogniaccess.com Open the contact page