Defined scope
Only the systems the engagement actually needs, agreed in advance and written into the arrangement.
Reference · DK-09
Pattern · Time-boxed external access
Duration · Fixed start, fixed end
Approval · Sponsor named and recorded
Access for suppliers and partners, limited to the engagement and nothing more
External organisations sometimes need to reach your systems for a defined piece of work. We give them exactly what that work requires, for exactly as long as it lasts, and we take it away on the day it ends. You keep control of a relationship you cannot fully see.
We provide services exclusively to businesses and organizations. We do not offer consumer or personal-device support. Minimum engagement: organizations with 10 or more staff who need access.
The risk of opening a door for a partner
When a supplier needs to reach your systems, the easy path is to grant broad access and rely on everyone to remember to close it later. That is how long-lived access accumulates around organisations. A project finishes, the relationship cools, and somewhere a route remains open that nobody is tracking.
We replace that with discipline. External access is always time-boxed. It has a start date, an end date and a named sponsor inside your organisation. It reaches a defined set of systems and no more. When the last date passes, the access ends, whether or not anyone has remembered to ask, and the end is recorded like every other change.
How we handle an external relationship
- Sponsor named. An individual inside your organisation owns the relationship and the access it requires.
- Scope defined. We agree which systems the partner may reach and which are out of bounds, and we hold to it.
- Time boxed. Every grant carries a fixed end date, chosen to match the work rather than left open.
- Renewed deliberately. If the relationship continues, the access is renewed on purpose, in the open, with a fresh decision.
- Ended on time. When the period closes, access comes away and the withdrawal is recorded.
Named sponsor
One accountable person inside your organisation, so there is always someone to ask and someone to inform.
Fixed end date
Access expires when the work does, without depending on anyone to remember to switch it off.
Observed activity
Partner connections are logged like everything else, so you can see when the door was used and by whom.
Partners on company equipment
The same principle that governs your own staff governs partners: access joins equipment the organisation owns and has approved. Where a partner works from their own premises, their reach is confined to the agreed systems and to the agreed period, and it does not extend to the rest of your estate. Where a partner is given a machine belonging to your organisation, that machine is enrolled and recorded, and its record is retired when the engagement ends.
Reporting to the sponsor
Sponsors receive a plain summary of what the external party was granted, when it began, when it will end, and any notable activity in between. That means a manager who inherits the relationship can see its access history at a glance, and an auditor can follow an external party's reach through the organisation's records without special effort. External access becomes an ordinary, visible part of the arrangement rather than a quiet exception to it.