I started PureLayer because I kept seeing the same problem. Organisations were paying an MSP and assuming…
Lee F. — IAM & GRC Consultant | Identity Governance, Access Control & Security Design
I started PureLayer because I kept seeing the same problem.
Organisations were paying an MSP and assuming everything was under control.
But no one could clearly answer a simple question:
Who actually has access to our systems?
Not just internally. Across accounts, credentials, shared access, and third parties.
When you look properly, there is usually no complete view. No clear ownership.
Just assumptions.
No one is doing anything wrong.
It just has not been treated as something that needs to be properly owned and structured.
That is where the real risk sits.
Not just technical risk, but governance, privacy, and accountability risk as expectations keep increasing.
My work is focused on fixing that properly.
Aligning environments to the Privacy Act, ISO/IEC 27001 controls, and NIST Cybersecurity Framework risk management, with a clear governance, risk, and compliance structure behind it.
I recently worked with a client to bring full clarity across access, credentials, and compliance.
Everything documented. Everything visible. Clear ownership in place.
If you are not completely sure who has access to your systems, that is usually the starting point.
Happy to have a conversation.
www.purelayer.co.nz
3 reactions · 1 comments
Comments
Laurent H.: Access sprawl across MSPs and third parties is one of those risks that only becomes visible when something goes wrong. Good to see someone building a practice specifically around that gap Lee Fleming