Passkeys and phishing-resistant access

A passkey rollout is
an identity programme.

MAITS designs passkey adoption across method selection, enrolment, Conditional Access, devices, recovery, privileged access, support and phased enforcement.

Prove the complete journey

Successful authentication is only one path. Registration, replacement, lost-device recovery, exceptions and emergency access require equal attention.

Capability

Move from method choice to operational adoption.

The design distinguishes synced and device-bound experiences, roaming FIDO2 keys, Windows Hello for Business and platform support.

STRATEGY

Method and population strategy

Match passkey and FIDO2 options to workforce, customer, privileged, device and assurance needs.

ENROL

Registration and bootstrap

Protect Temporary Access Pass and other enrolment methods, proofing, device binding and support.

POLICY

Authentication strengths

Map methods to Conditional Access, application sensitivity and privileged actions.

RECOVER

Recovery and replacement

Design lost-device, replacement, fallback and help-desk paths that retain proportionate assurance.

PILOT

Pilot and measurement

Test representative users, devices, applications, failure modes and support processes before enforcement.

ROLLOUT

Phased adoption

Sequence communication, enrolment, policy, monitoring and exception closure by cohort.

Engagement outcomes

Make the next decision and delivery step clearer.

READY

Readiness position

Dependencies and unsupported populations are understood before rollout.

DESIGN

Complete journey design

Enrolment, use, recovery and support have explicit controls.

PILOT

Evidence-led pilot

Real failure modes inform policy and communication.

ADOPT

Controlled adoption

Enforcement increases with measured operational confidence.

Expected outputs

Useful artefacts for the people who must act.

Outputs are agreed for the engagement scope and written for the leaders, architects, engineers, operators and assurance teams who will use them.

Passkey strategyPopulation modelRegistration designConditional Access designPilot planRecovery runbookRollout roadmap

From advice through implementation

Enter at the stage where support is needed.

MAITS can provide one bounded stage or remain involved across design, delivery, validation and capability transfer.

01 / DISCOVER

Understand the decision

Clarify the people, systems, obligations, constraints, ownership and outcome involved.

02 / ASSESS

Establish current state

Review evidence, architecture, controls, risk, capability and delivery readiness.

03 / DESIGN

Define the target

Set principles, architecture, policy, operating ownership and a practical change sequence.

04 / DELIVER

Implement the change

Configure, integrate, automate, migrate and roll out alongside accountable teams.

05 / VALIDATE

Test the outcome

Review behaviour, evidence, exceptions, recovery, readiness and residual risk.

06 / UPLIFT

Transfer capability

Embed knowledge, governance, runbooks, measures and an owned improvement path.

Related capability

Continue with the service that matches the next decision.

Start a conversation

Start with the requirement, risk or decision.

Tell us what needs senior attention and what outcome the organisation needs. We’ll agree an engagement shape around the work.