SXIZA / About us
Consulting for Microsoft 365, Entra ID and Azure
SXIZA provides independent IT security consulting to businesses and their IT teams. We work with Microsoft 365, Entra ID and Azure, tailoring the scope to your environment and requirements.
How we can help
- Identity and access: assessment of authentication, permissions and privileged account management.
- Cloud configurations: review of security settings and responsibilities for cloud services.
- Incident readiness: assessment of roles, response procedures and operational recovery.
- Audit support: preparation of evidence and controls for ISO 27001 and ISAE 3402 audits.
Working together
In the initial call we establish the problem, the available evidence and the scope of work. Depending on the agreed scope, the output is a summary of findings and prioritised recommendations your team can use to plan remediation.
Our recommendations are not tied to a tool vendor. Articles on this website support our consulting services with analysis of real events and links to sources.
What SXIZA stands for
The name stands for the five things we work on:
- S — Security: the overall security posture of an environment, not a single tool.
- X — eXposure: what in your environment is exposed to the outside, and who can reach it.
- I — Identity: who has access, to what, and why.
- Z — Zero Trust: a security model built on the principle that no user, device, application or system is trusted automatically.
- A — Audit: the evidence and controls that hold up in front of an auditor.
CONSULTANT
Who is behind SXIZA
Peter Grajciar — security architect and consultant
I have worked in IT since 2007 and in security since 2010. I moved from technical support through identity and access management and security engineering to the roles of security architect and security officer. My experience comes from banking and financial services, payment card processing, IT consulting and healthcare software — environments where regulation, audits and continuous availability are not theory.
What I work on most often:
- Identity and access: account lifecycle and regular permission reviews, privileged access management including session recording and control, multi-factor authentication and passwordless sign-in.
- Microsoft 365, Entra ID and Azure: device management with Intune, data classification and protection based on sensitivity, security settings of cloud services.
- Security architecture: designs for application and infrastructure projects, review and approval of exceptions (firewall, VPN, third-party access), risk analysis for systems being brought into service.
- Security operations: vulnerability scanning, moving SIEM from on-premises to the cloud and protecting the logs, designing processes and tooling for a SOC.
- Audit and compliance: supporting ISO 27001 certification as the subject matter expert for access management, taking part in internal and external audits including PCI DSS.
Certifications: CISSP, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Administrator Associate, CCNA. I hold a master’s degree in telecommunications from the Slovak University of Technology in Bratislava.
I work in Slovak or English. A detailed profile is on LinkedIn.