u/EstateCheap2804

We’re working with an outside agency on a sensitive product launch and I keep coming back to one issue. We can lock down docs and make everyone sign NDAs. We can limit Slack channels and control who gets access. But the agency still has its own team and its own devices. I might know the four senior people we work with but there could be another ten people touching parts of the launch behind the scenes. At that point how do you know the person accessing something is actually the person who was approved?

For anyone who has managed a major launch how did you handle this without making the whole process painful? Because it really is, outside of the simple stuff that I've already done, what else can I do?!