Microsoft 365 Security & Identity
Conditional access, MFA, passwordless sign-in and Privileged Identity Management in Entra ID.
Microsoft security & compliance · Kenya & East Africa
You already own enterprise-grade security. Most businesses just
aren't using it.
Logivate is Kenya's Microsoft-first security and compliance partner. We turn the Microsoft 365 and Azure licences you've already paid for into real protection, and get you ready for the Data Protection Act 2019.
Free Threat Gap Analysis · no cost, no obligation
Built on the Microsoft security stack you already license · mapped to the frameworks you answer to
Microsoft Entra IDDefender XDRMicrosoft SentinelMicrosoft PurviewIntuneAzureISO/IEC 27001NIST CSFGDPRKenya Data Protection Act 2019Zero Trust Architecture
What we do
Identity is the front door. We start there.
Identity is the front door to Microsoft 365 and Azure. We audit access first, close the highest-impact gaps, and only then move outward to devices, data, and monitoring. That order is deliberate: get identity right and everything built on top of it, security, compliance, AI adoption, gets easier to secure and easier to prove to an auditor.
Zero Trust Architecture
Identity-first controls across endpoints and hybrid connectivity, so every device and access path stays verified.
Managed Detection & Response
Microsoft Sentinel and Defender XDR, tuned to your tenant and monitored by analysts who triage real alerts.
GRC & Data Protection
Purview labels, data loss prevention and retention, mapped to ISO 27001, NIST CSF and the Data Protection Act 2019.
PrivacyOps
DPIAs, records of processing and vendor due diligence, run as an ongoing operation.
Secure AI Adoption
Close oversharing and set data boundaries before Microsoft Copilot touches your tenant.
Azure & Cloud Security
Landing zone review, Defender for Cloud posture dashboards, and Sentinel ingestion costs right-sized.
Cloud Migration & Modern Workplace
Mailboxes, files and legacy systems moved into Microsoft 365 and Azure with a cutover your staff barely notice.
Incident Readiness & Response
Escalation paths, tested playbooks and an incident response retainer in place before you need it.
Managed services
Continuous improvement, not a one-time project.
Security posture decays without upkeep. Our managed security and advisory service keeps your Microsoft environment tuned month over month, with quarterly reporting written in language your board can act on, not just a dashboard nobody reads.
01 / 04
Managed IT Services
Day-to-day IT support across users, access and Microsoft 365, resolving issues quickly while keeping access changes handled cleanly and consistently.
02 / 04
Security Operations
We run managed security operations using Microsoft Sentinel and Defender XDR, with analysts triaging real threats instead of raw alerts, so your team sees signal, not noise.
03 / 04
Azure & Cloud Security
We operate and secure Azure and Microsoft 365 environments, keeping platforms available and cost-effective as usage grows, with governance that keeps pace with change.
04 / 04
Endpoint & Device Management
We manage endpoints and mobile devices across office, remote and hybrid work, keeping devices compliant and users secure wherever they work from.
Why Logivate
Why Logivate
What you get from working with us, stated plainly.
01
Microsoft-first by design.
Every engagement is built on the Microsoft security stack you already license, Entra ID, Defender, Purview, and Sentinel, not a new layer of third-party tools.
02
A certified team.
Our engineers hold current Microsoft certifications across security operations, identity, and cloud infrastructure, including SC-200 (Security Operations Analyst), SC-300 (Identity and Access Administrator), and AZ-104 (Microsoft Azure Administrator), with SC-100 (Cybersecurity Architect) further strengthening our advisory and architecture work.
03
Practical recommendations.
Findings are scoped to what your team can realistically implement and maintain, not a checklist your team will never get through.
04
Executive-friendly reporting.
Technical findings translated into language your board and leadership can act on.
05
Remote-first delivery.
Engagements run efficiently across Kenya and the United States without unnecessary travel overhead.
06
Microsoft best-practice alignment.
Recommendations follow Microsoft's own security baselines and frameworks, not a generic industry checklist.
4certifications
Microsoft certifications held across the team
SC-200, SC-300, AZ-104 and SC-100.
72hours
ODPC breach notification window
Set by Kenya's Data Protection Act 2019. We configure Microsoft tooling around it.
2weeks
To a written gap analysis
No licence commitment. You keep the analysis either way.
The problem
Security that starts with who's logging in
Most breaches don't start with a hacked firewall. They start with a stolen password.
That's why we build every engagement, security, compliance, cloud, around identity first: who has access, to what, and whether that access is still justified.
Treat identity as an afterthought and gaps multiply quietly. Put it at the centre and access moves faster, risk stays contained, and audits get easier.
As a Microsoft-first consultancy, we configure and operate Microsoft 365 and Azure around identity-first controls, so security holds even as your team, tools, and access needs change.
Identity firstAccess audited before devices, data and monitoring.
Data Protection Act 2019Controls mapped to the statute.
Engagement process
How an engagement runs
Clear stages, in this order. Most clients start with the free assessment.
Step 01 · Assess
Book a free Threat Gap Analysis
A focused review of your Microsoft 365 and Azure security posture, what's covered, what's exposed, and what to fix first. No cost, no obligation.
Step 02 · Fix
Close the highest-impact gaps first
You get a prioritized plan that starts with identity and access. We configure the fixes inside the Microsoft tools you already license, then move outward to devices, data, and monitoring.
Step 03 · Secure AI
Copilot is only as safe as what it can see.
We check what Microsoft Copilot can access before it goes live, then govern how it's used afterward with Purview and Defender.
Step 04 · Improve
Quarterly reporting your board can act on
Security posture decays without upkeep. Our managed security and advisory service keeps your Microsoft environment tuned month over month.
Prefer to talk first? info@logivate.com
Industries
Built around how each sector actually works
From SMEs to banks, we configure Microsoft 365, Azure and Purview against the compliance obligations and threat profile specific to your sector.
Every engagement is scoped to your sector's data and regulatory obligations.
Compliance
One control set, evidenced against whichever standard you're held to
Kenyan statute isn't the only bar you're held to. We map the same Microsoft configuration to the frameworks your board, auditors or funders already recognise.
01
Data Protection Act 2019
72hours to notify the ODPC
Breach notification window under the Act.
The obligation
Breach notification to the Office of the Data Protection Commissioner is due within 72 hours of your organisation becoming aware of it.
How we configure it
Microsoft Purview and Microsoft Sentinel start the clock the moment a qualifying incident is detected, not when someone remembers to check.
What you hold
Purview audit logs and eDiscovery build the evidence trail an ODPC notification needs.
02
ISO/IEC 27001
AAnnex A controls, mapped
Mapped onto Purview, Defender, Entra and Intune.
The standard
ISO/IEC 27001 Annex A sets the control set your auditor tests against.
How we configure it
We map controls to Annex A and keep Compliance Manager evidence current.
What you hold
A surveillance audit becomes a scheduled review, not a fire drill.
03
NIST Cybersecurity Framework
5functions assessed
Identify, Protect, Detect, Respond, Recover.
The framework
NIST CSF describes security maturity across five functions.
How we assess it
We assess maturity across Identify, Protect, Detect, Respond and Recover.
What you hold
A gap list that prioritises what we build next.
Most breaches don't start with a sophisticated exploit. They start with a gap someone assumed didn't matter.
Insights
Field notes on Microsoft security in Kenya
Contact
Let's look at your tenant together
Two weeks, no licence commitment. You keep the gap analysis either way, pick a starting point below or write to us directly.
- info@logivate.com
- Already mid-incident? Say so in the subject line and we'll prioritise it.
- Nairobi, Kenya · remote-first across Kenya and the United States
What does the free Threat Gap Analysis include?
A focused review of your Microsoft 365 and Azure security posture: what's covered, what's exposed, and what to fix first. No cost, no obligation, and you keep the gap analysis either way.
Do we need to buy new security tools?
Usually not. We start with the Microsoft security tools you already have, Entra ID, Defender, Purview, and Sentinel, and add only what is genuinely missing.
How do you handle the Data Protection Act 2019?
We map Microsoft technical controls directly to the Act, configure Purview and Sentinel around the ODPC's 72-hour breach window, and produce the records of processing and DPIAs an auditor expects.
Who will work on our tenant?
Engineers holding current Microsoft certifications across security operations, identity and cloud infrastructure, including SC-200, SC-300, AZ-104 and SC-100.
Where do you deliver engagements?
Engagements run remote-first across Kenya and the United States, without unnecessary travel overhead.
Can you help before we switch on Copilot?
Yes. We check what Microsoft Copilot can access before it goes live, then govern how it's used afterward with Purview and Defender.