The day-to-day, done properly.
Changes, firmware, certificates before they expire, access reviews, and the configuration backups everyone assumes are running. We do this as overflow for a team that is stretched, or as the whole function for a site that does not have one.
Why it matters
Administration is the work that is invisible until it is skipped: the certificate that lapses, the config change nobody recorded, the account that should have been removed two staff-changes ago. It is unglamorous, and it is where most avoidable incidents actually start.
What it covers
- Moves, adds and changes
- Change requests and approvals, applied and recorded, so the estate matches its documentation rather than drifting away from it.
- Lifecycle upkeep
- Firmware, certificate renewals before expiry, and configuration backup with drift detection.
- Access hygiene
- Access reviews, local and RADIUS or TACACS+ accounts, and documentation upkeep so the next person inherits a true picture.
How it runs
Take stock
A current picture of accounts, firmware, certificates and configs, so the day-to-day starts from what is real.
Run the routine
The recurring work on a calendar: renewals, reviews, backups and change control, done before the deadline rather than after the failure.
Keep the record true
Every change recorded, so the documentation stays worth reading.
What you are left holding
- Change record and approvals.
- Firmware and certificate calendar.
- Access review record.
- Configuration backups with drift detection.
Questions we are asked first
Can you cover just the overflow, not the whole function?
Either. We run this as overflow for a stretched team, or as the whole function for a site that does not have one, and we hand the record back the same way in both cases.
How do you stop configuration drift?
Configuration backups on commit with drift detection, and every change recorded through change control, so the running config and the documented one do not quietly diverge.
Related work
Tell us what is bothering you.
An email is enough to start with. A scoping call is free and there is nothing to commit to, and where we are not the right people we will say so and point you at someone who is.
A first call about one site. No charge, and nothing to commit to.
Our named next step: we come to one site and hand you an assessment you can act on.