Resources

Practical IT guides, no sales pitch.

Short, plain-English explainers on the questions Australian small businesses ask us most.

Free download

Small Business IT Readiness Checklist

30 checks across identity, devices, network, backup and Microsoft 365 — with a simple score at the end. No email required.

Cybersecurity5 min read

The five security controls that stop most SMB incidents

You don't need an enterprise budget to be a hard target. Almost every incident we see in small business traces back to one of five missing controls.

  • Multi-factor authentication on email and admin accounts — the single highest-value control you can turn on today.
  • Separate admin accounts, so a compromised day-to-day login can't reconfigure your tenant.
  • Managed patching for operating systems, browsers and firewall firmware, not 'remind me tomorrow' forever.
  • Endpoint protection that reports centrally, so someone actually sees the alert.
  • Tested backups with an offsite copy — including Microsoft 365 data, which Microsoft does not back up for you.
Microsoft 3654 min read

Microsoft 365 is not backed up (and what that means for you)

Microsoft guarantees the availability of the service, not the recoverability of your data. Retention policies and the recycle bin are not a backup.

  • Deleted mailbox items are typically unrecoverable after the retention window closes — often 30 days.
  • A ransomware event that encrypts synced SharePoint or OneDrive files replicates that damage to the cloud copy.
  • A departing staff member who deletes content before offboarding leaves you with limited options.
  • Third-party Microsoft 365 backup gives you point-in-time restore for mail, SharePoint, OneDrive and Teams.
  • Whatever you choose, test a restore — an untested backup is only a plan, not a safety net.
Operations4 min read

Signs your business has outgrown 'the person who's good with computers'

Most small businesses run IT informally until it starts costing real money. These are the signals we see just before things break.

  • Nobody can produce a current list of your devices, licences or admin passwords.
  • New starters take days to get working because setup is done from memory.
  • IT problems get fixed but never recorded, so the same issue returns quarterly.
  • One person holds all the access — and they're also the one going on leave.
  • You're paying for software licences nobody has used in a year.
Networking4 min read

What a properly designed small business network looks like

A network built well once will quietly serve you for years. A network grown by accident causes outages nobody can explain.

  • A business-grade firewall with documented rules, not the ISP modem in the corner.
  • VLAN separation between staff, guests, and devices like printers, cameras and EFTPOS.
  • Wi-Fi placed by coverage design, not by where a power point happened to be.
  • A labelled comms rack and an up-to-date network diagram.
  • Remote access via VPN with MFA — never a port forwarded straight to a server.

Jargon buster

Every IT term we use, in plain English.

Search any term you've heard from an IT provider and see what it actually means — and why it matters for your business.

18 of 18 terms

MFA (Multi-Factor Authentication)

A second proof of identity — usually a code or app prompt — on top of your password.

Why it matters: Stops the vast majority of account takeovers, even when a password leaks.

Entra ID

Microsoft's identity service (formerly Azure AD) that holds your staff logins.

Why it matters: It controls who can sign in to email, Teams, SharePoint and company devices.

Conditional Access

Rules that decide when a login is allowed — by location, device or risk level.

Why it matters: Blocks sign-ins from places or devices your business never uses.

Endpoint

Any device a person uses: laptop, desktop, phone or tablet.

Why it matters: Most incidents start on an endpoint, so this is where protection matters most.

EDR / Endpoint Protection

Modern antivirus that also detects suspicious behaviour and reports centrally.

Why it matters: Someone actually sees the alert instead of it sitting on one laptop.

Patching

Applying vendor updates to operating systems, apps and network gear.

Why it matters: Unpatched software is the most common way attackers get in.

VLAN

A way of splitting one physical network into separate logical networks.

Why it matters: Keeps guests, cameras and phones away from your business systems.

VPN

An encrypted tunnel into your office network from outside it.

Why it matters: Lets staff work remotely without exposing internal systems to the internet.

Firewall

The device that controls what traffic can enter and leave your network.

Why it matters: An ISP modem is not a firewall — rules and logging matter.

PoE (Power over Ethernet)

Power delivered over the same cable that carries network data.

Why it matters: Powers access points, phones and cameras without extra power outlets.

SPF / DKIM / DMARC

DNS records that prove your email really came from you.

Why it matters: Without them your mail lands in junk and others can spoof your domain.

SharePoint / OneDrive

Microsoft's cloud file storage — shared company files and personal files.

Why it matters: Where your documents actually live once you move off a local server.

RPO / RTO

How much data you can afford to lose, and how quickly you need to be back up.

Why it matters: These two numbers decide what your backup design needs to look like.

Least Privilege

Everyone gets only the access their job needs — nothing extra.

Why it matters: Limits the damage when any single account is compromised.

SLA

A written commitment to response and resolution times.

Why it matters: It's the difference between 'we'll get to it' and a measurable promise.

Phishing

A fake message designed to trick someone into handing over credentials or money.

Why it matters: Still the number one entry point for attacks on small business.

Asset Register

A current list of every device, licence, warranty and who has it.

Why it matters: You can't secure, budget for or replace what you can't see.

Zero Trust

An approach that verifies every request instead of trusting the internal network.

Why it matters: Reflects reality now that staff and data both live outside the office.

Apply it

See how your own environment scores.

The free IT health check turns these guides into a checklist for your business.

Run the health checkAsk us a question