We design, secure and automate Microsoft 365 for organisations that need enterprise-grade IT without an enterprise-sized team — identity, devices, data protection and security operations, done by someone who does this every day.
Hands-on help across the Microsoft stack — from first tenant to hardened, audited, automated estate.
Tenant design and clean-up, migrations, multi-tenant governance and licence optimisation — so the platform fits the business instead of the other way round.
Entra ID and Intune configured the way Microsoft intends: Conditional Access that blocks the right things, devices enrolled, patched and compliant from day one.
Sensitivity labels, DLP and insider risk policies that protect what matters without drowning your people in false positives.
Defender and Sentinel tuned to your environment, custom KQL detections for the threats that generic rules miss, and audit-log investigations when something looks wrong.
Cyber Essentials, Cyber Essentials Plus and CIS benchmark alignment — with the evidence to prove it, not just a tick in a box.
The repetitive admin work, automated: Power Platform workflows, Azure Automation runbooks and PowerShell against Graph, surfaced in Power BI so you can see the state of your estate.
Every engagement ends with your team able to run what we built. If you want us to keep running it, that's a separate conversation — never a condition.
A short, structured review of your tenant, identities, devices and controls against CIS and Cyber Essentials. You get a prioritised findings report you can act on with or without us.
Agreed changes delivered in small, tested steps with change records and rollback plans. Nothing goes live in your tenant that you haven't seen first.
Documentation, runbooks and a handover session for your team. Optional monthly retainer for monitoring, patch review and the questions that come up after go-live.
Carruthers Technology Consulting is led by Kieran Carruthers, a hands-on Microsoft 365 specialist across identity, endpoints, Purview, security operations and the automation that holds it all together — with a security operations background, watching what actually gets attacked.
That means advice grounded in what works in production, not what looks good in a slide deck — and a habit of building tooling and writing it down so it keeps working after we leave.
A 30-minute call to understand where you are and whether we're the right fit. No pitch deck, no obligation.
