Small organizations rarely have a full IT department, yet they depend on technology as much as large companies do. Email, files, accounting software and printers all need to just work. The good news: most everyday IT problems can be prevented with a few simple habits that don't require a big budget.
Here are ten practical tips I've applied over 13+ years of supporting users in offices of every size.
1. Turn on multi-factor authentication (MFA) everywhere
A stolen password is one of the most common ways attackers get in. MFA adds a second step, such as an app notification or code, so a password alone isn't enough.
- Start with email (Microsoft 365 or Google Workspace) and admin accounts.
- Use an authenticator app rather than SMS where possible.
- Make it company policy, not optional.
2. Keep everything updated
Updates fix security holes that attackers actively look for. Turn on automatic updates for Windows, macOS, browsers and Office, and don't forget firmware on routers, firewalls and printers.
3. Back up using the 3-2-1 rule
Keep 3 copies of important data, on 2 different types of storage, with 1 copy off-site or in the cloud. This protects you from hardware failure, accidental deletion and ransomware.
- Remember that cloud apps like Microsoft 365 also need a backup plan.
- Test a restore every few months; a backup you've never restored is only a hope.
4. Don't give everyone admin rights
Daily work should happen on standard user accounts. Admin rights let malware install itself and make accidental damage far easier. Keep a separate admin account for the person who manages IT and use it only when needed.
5. Use a password manager
People reuse passwords because they can't remember dozens of them. A business password manager creates strong, unique passwords and lets the team share access to shared accounts safely instead of using spreadsheets or sticky notes.
6. Keep a simple IT inventory
Know what you own. A basic spreadsheet is enough to start:
- Device, user, serial number and purchase date.
- Warranty end date and planned replacement year.
- Software licenses and their renewal dates.
This makes budgeting easier, avoids surprise license expiries and helps you replace ageing laptops before they fail.
7. Secure your Wi-Fi and separate guests
Use WPA2 or WPA3 with a strong passphrase, change the router's default admin password and create a separate guest network so visitors never share the network your computers and file storage use.
8. Protect every device
Make sure each computer has endpoint protection enabled (Microsoft Defender is built into Windows), disk encryption turned on (BitLocker or FileVault) and a screen lock after a few minutes of inactivity. If you use Microsoft 365 Business Premium, Intune can enforce these settings centrally.
9. Use an onboarding and offboarding checklist
New starters should get the right accounts, devices and access from day one. Just as important, leavers must lose access the day they go.
- Onboarding: create accounts, enable MFA, issue and record the device, grant only the access the role needs.
- Offboarding: disable accounts, change shared passwords, collect devices, transfer files and mailbox ownership.
10. Train people and write things down
Most incidents start with a click on a convincing phishing email. A short, friendly training session a couple of times a year pays off quickly. Also document the basics: who your internet provider is, how to reach your IT support, where backups live and the steps to follow when something goes wrong.
Start small, stay consistent
You don't need to do everything at once. Start with MFA, updates and backups; they prevent the majority of serious problems. Then work through the rest over a few weeks. Consistent basics beat expensive tools that nobody maintains.
Need help putting these in place for your organization? Get in touch through the contact form; I'm happy to help.