Cybersecurity
Web Application Security Testing for SMBs
Learn how web application security testing finds real flaws in authentication, access control, APIs, sessions, and business logic before attackers do.
George Mansoor
CEO, GlobeVM
George Mansoor runs GlobeVM, the Los Angeles managed IT and cybersecurity company that has supported businesses for 30 years.
He has managed IT projects for California's DMV and municipal agencies, and he still answers the phone when clients call.
Articles by George (186)
Cybersecurity
How to Report Phishing in Outlook
Learn how to report phishing in Outlook, what happens after reporting, why the button may be missing, and what to do if you already clicked a link.
Cloud and Microsoft 365
Microsoft 365 Business Premium vs E3
Compare Microsoft 365 Business Premium vs E3, including security, licensing, Entra ID, Defender, pricing, and when E5 may be the better fit.
Managed IT
SSPR and Self Service Password Reset
Learn how SSPR works in Microsoft Entra, where self service password reset reduces helpdesk tickets, and how businesses can deploy it securely.
Cybersecurity
Notice of Privacy Practices: 2026 Guide
Learn what a Notice of Privacy Practices must include, when to provide it, and what healthcare practices need to update under HIPAA in 2026.
Cloud and Microsoft 365
Cloud and Microsoft 365 Security with SSPM
Learn how SaaS security posture management helps keep Microsoft 365 configurations, permissions, and cloud access aligned as your business changes.
Industries
Off-Channel Communications Compliance in 2026
Learn how advisory firms can identify off-channel communications, meet recordkeeping requirements, capture business texting, and prove their archive works.
Managed IT
EHR Downtime Procedures for Medical Practices
Learn how to keep a medical practice operating during an EHR outage, from the first 15 minutes and downtime kits to failover, recovery, and re-entry.
Managed IT
Managed IT Services Pricing: Models, Costs & What's Included
Understand managed IT services pricing: per-user vs per-device models, what's included, cost factors, and how to compare MSP quotes without surprises.
Cybersecurity
Is Zoom HIPAA Compliant? BAA, Settings & Safe Telehealth Use
Zoom can support HIPAA compliance only with an eligible paid plan, a signed BAA, and the right settings. What that means for telehealth, Meet, and Teams.
Cybersecurity
Holiday Cyber Threats & Scams Targeting Small Businesses
Why attacks spike between Thanksgiving and New Year's: the gift card, invoice, and ransomware plays that target SMBs, and the pre-holiday checklist.
Cybersecurity
HIPAA Compliant Fax & Texting: What Practices Must Set Up
Paper fax, cloud fax, patient texting, and answering services each have their own HIPAA rules. What needs a BAA, what needs consent, and what to avoid.
Cybersecurity
HIPAA Compliant Email Providers: A Practice Buyer's Guide
No email is HIPAA compliant by itself. How the three provider categories compare, what Google and Microsoft cover, and the setup your practice needs.
Managed IT
Co-Managed IT Services: How the Model Works & Who It Fits
Co-managed IT explained: how responsibilities split between your internal IT person and an MSP, what the provider adds, costs, and when it's the wrong fit.
Cybersecurity
Section 508 Compliance: Standards, VPATs & Who Must Comply
Section 508 binds federal ICT and reaches vendors through procurement. The WCAG 2.0 AA baseline, VPAT and ACR mechanics, and a practical path to compliance.
Cybersecurity
NIST 800-171 Explained: Rev 2, SPRS Scores & Compliance
NIST 800-171 Rev 2 still governs defense contracts: what the 110 requirements cover, how SPRS scoring really works, and a 90-day path to a defensible score.
Cybersecurity
CMMC Compliance in 2026: Levels, Status & Requirements
CMMC Phase 2 is suspended but Phase 1 self-assessments are mandatory. The levels, what is actually required today, SPRS scoring, and a readiness path.
Cybersecurity
ADA Website Lawsuits: Data, Demand Letters & Your Response
Over 5,000 digital accessibility suits were filed in 2025. How ADA website lawsuits work, what a demand letter really means, and the first 30 days done right.
Managed IT
HIPAA Compliant Texting: Rules for Texting Patients Safely
Standard SMS is not HIPAA compliant on its own. When texting patients is allowed, what appointment reminders can say, and how secure messaging platforms work.
Cybersecurity
Website Accessibility Audit: What It Really Includes
What a real website accessibility audit includes: automated and screen reader testing, the report you should get, and the red flags of a fake one.
Industries
IT Support for Architects & Engineering Firms: A Guide
IT support for architects and engineering firms: CAD and BIM workstations, huge project files, license servers, remote work, and archives that outlive projects.
Managed IT
IT Roadmap & Budget Planning: A Small Business Playbook
Plan next year's IT budget with confidence: what to include, how a technology roadmap prevents surprise costs, and when to start. A practical SMB guide.
Industries
IT Support for Law Firms: How to Choose the Right Provider
Law firm IT support is different: privilege, client security audits, filing deadlines, and DMS uptime. How to evaluate providers before you sign.
Industries
IT Support for Nonprofits: A Practical Guide for Lean Teams
Nonprofit IT support balances tight budgets, volunteer turnover, donor data, and funder security reviews. What good support includes and costs.