Security assurance & practical IT support
When a customer asks about security, give them a clear response backed by what your team can demonstrate.
From customer questionnaires to Microsoft 365 and Windows devices, get a defined piece of work off your list—with evidence, documentation and a useful handover.
Discuss a piece of workWhere Firmword can help
Start with the request in front of you. We agree what needs reviewing, what evidence is available and what a useful outcome looks like.
01
Turn your policies and technical evidence into draft answers for a customer security review. Anything unclear or unsupported is flagged for your team to check.
You receive: draft responses, an evidence register, open actions and reusable answers for your approval.
02
Review a supplier's security information against the service you plan to use, the data involved and your agreed requirements.
You receive: evidence-based findings, clarification questions and a recommendation to support your decision.
03
Check policies, controls and evidence against an agreed set of requirements. Understand where the gaps are and what needs attention first.
You receive: scoped findings and an action plan with proposed priorities and evidence needed for closure.
04
Review administrator access, MFA configuration and selected Windows device settings in one existing tenant. Licensing and the agreed evidence determine what can be checked.
You receive: A configuration summary, prioritised findings and an action list. Compare review scopes.
05
Support a defined batch of Windows builds, OOBE setup, Autopilot registration or Intune enrolment, with prerequisites and responsibilities agreed first.
You receive: A completed work log, enrollment checks, exceptions and handover notes. Remote support or planned onsite work by agreement.
06
Reduce repetitive control checks and reporting with a focused script, query or report. PowerShell, KQL and Power BI work is scoped around the systems and permissions available.
You receive: A tested output, setup instructions, known limitations and a handover. Changes are approved before implementation.
07
Refresh a defined policy or procedure, organise evidence requests or document how a recurring control operates. Work with the people who own the process.
You receive: Draft documents, an evidence index or a repeatable procedure for your review and approval.
08
Investigate a specific device, access or connectivity issue. Relevant experience includes Microsoft environments and a wider range of endpoint, network and security tools.
You receive: Investigation notes, findings and agreed next steps. Any configuration changes have a defined approval and rollback approach.
Microsoft 365 access & device review
Five devices is the starter package boundary, not a technical limit. For larger environments, agree the depth, coverage and evidence before choosing a price.
One existing tenant, up to five users and five already-enrolled Windows devices. Review selected access and configuration settings using agreed exports or supervised screen sharing.
Written findings, prioritised actions, a 30-minute handover and one clarification round. Target delivery: seven calendar days after evidence is available, subject to an agreed start date.
Up to 25 users and 25 enrolled Windows devices in one tenant. Agree whether every selected account/device is checked or whether a clearly identified sample is appropriate.
Coverage list, exceptions, evidence-linked findings and a prioritised action plan. Scope, fixed fee and delivery date agreed before work starts.
More than 25 users or devices, multiple sites or more complex policies. Start with an inventory and a defined review phase, with representative sampling where appropriate.
Explicit coverage and exclusions. No claim that a sample proves every device is secure. Remediation, new builds and ongoing support are priced separately.
These are configuration reviews, not penetration tests or certification. Existing licences may limit available checks. We agree temporary least-privilege access if needed; do not email passwords.
How it works
01 / Agree
Discuss your deadline, the request and the evidence you already have. A redacted example helps establish the work involved.
02 / Review
Agree the deliverables, review limits and delivery date before work starts. Share the agreed evidence through Microsoft 365.
03 / Handover
Receive the draft, evidence references and open points. Your team approves customer responses and owns supplier and risk decisions.
See the format
Three worked examples show how Firmword presents questionnaire answers, supplier findings and readiness actions.
4 pages. Fictional demonstration only. These are not client findings or verified controls.
Practical starting points
Gather the customer’s questions, deadline, product scope and existing policies. Mark answers that need a technical owner’s input. Keep evidence links separate from unsupported claims.
Confirm your tenant, licences, approximate user/device count and the issue you want to understand. Start with an inventory—not administrator passwords.
Need help with a defined backlog or project phase? Agree your client’s approval, responsibilities, confidentiality and handover format. White-label support can be discussed where appropriate.
About Firmword
Firmword is run by Fidelis Iwu, a security and IT professional supporting small businesses, SaaS teams and consultancies with defined projects.
You work directly with Fidelis from the first conversation through to the handover. The aim is straightforward: clear security information, an honest account of the evidence and practical next steps.
His experience spans technical controls monitoring, audit evidence support, endpoint administration and Windows deployment. During his field engineering work, he supported a multi-office Windows 11 rollout covering approximately 500–1,000 devices as part of a wider team.
Credentials include CompTIA Security+, Microsoft SC-900 and renewed Fortinet certifications. SC-401 remains in progress.
Delivery is arranged around evening and weekend availability. Planned project work is a good fit; continuous daytime helpdesk coverage and emergency response are not offered.
Common questions
Yes. Customers may ask for answers in their own format or request evidence for a particular product or setup. Firmword can use your existing materials as a starting point and flag anything that needs a fresh check.
We identify what is missing and agree how to handle it. An unsupported claim stays open for review. Where useful, a focused readiness review can help organise the next steps.
Firmword provides preparation, review and practical readiness support. Certification, independent audit opinions and legal advice are outside these services.
Yes. The £225 starter covers up to five of each. A team review can cover up to 25 of each at an agreed fixed quote; larger environments are scoped in phases. We state whether coverage is complete or sampled.
Bounded remediation or administration work can be quoted separately. We agree permissions, a change window, testing and rollback before touching production settings.
Projects are planned around evenings and weekends. We agree a realistic start date and delivery window before accepting work. Continuous daytime cover is outside the service.
The fee depends on the volume of questions or evidence, the review scope and the deadline. Send a redacted sample and we can agree a fixed fee for a clearly defined piece of work.
Get in touch
Tell us what you need help with and when you need it. Please keep the initial message brief and avoid sending confidential evidence until a suitable sharing route is agreed.
[email protected]Choose a service and add a few non-confidential details. This opens your email app with a draft; nothing is submitted through this website.
This website is operated by Fidelis Iwu trading as Firmword. Cloudflare hosts and delivers the site and processes technical connection information, including IP addresses and traffic data, to provide and protect its services. Our purpose is to keep the website available and secure. We do not add advertising trackers, analytics scripts or a server-submitted contact form. The enquiry helper prepares text in your browser without sending it to us; your email app sends it only when you choose to send.
If you email us, our privacy notice below explains how we handle your enquiry and business contact information. Cloudflare may process technical information internationally; its privacy policy explains its processing, retention and safeguards. Contact [email protected] with a privacy question.