Loading the estate…
Financial services · Harbor & Co. Wealth (anonymized)
Giving an independent wealth firm a control story clients will diligence
A $14B independent RIA needed identity, logging, and a cloud posture that would survive enterprise-client security questionnaires.
- AUM supported
- $14B
- Privileged standing admin
- Break-glass only
- Questionnaire cycle
- Days, not weeks
The situation
Harbor had grown through advisor lift-outs. Each team brought a laptop standard, a file-share habit, and a different MFA story. Two custodial platforms, a home-grown portal, and a well-liked but unmonitored SaaS pile sat beside a single shared admin password in a password manager named 'old.' A strategic client’s security questionnaire had stalled a mandate.
What we did
InfraAlly rebuilt identity around SSO and vaulted privilege, standardized endpoints, and inventoried SaaS. Logging landed in a place a CISO could query. The client portal moved into a landing zone with backup and WAF in front. We wrote the diligence packet with the CCO, not after the fact, and stood up a tabletop the partners would actually attend.
What changed
- The stalled enterprise mandate closed after the questionnaire was answered with evidence, not narrative.
- Standing domain-admin use dropped to break-glass only.
- Partners kept their devices — under a standard they stopped arguing with once it was fast.
Start here
Tell us what is actually in production.
A short conversation is enough to know whether we are the right ally. No license dump. No theater.