Cloud and Microsoft 365
Microsoft 365 Groups and SharePoint Permissions
Learn how Microsoft 365 Groups control Teams and SharePoint access, plus SharePoint permissions best practices for owners, members, guests, and sites.
Plain-English IT and security guides
275 guides from our team on running, securing and paying for business IT, written for owners and office managers rather than engineers.
Browse by topic
Latest guides
Managed IT
Software License Management for SMBs
Software license management helps SMBs control renewals, reclaim unused seats, improve software license compliance, and plan IT spending with less waste.
Cybersecurity
HIPAA Compliant CRM: What Practices Need
Learn what makes a HIPAA compliant CRM, including BAA requirements, access controls, audit logs, integrations, PHI handling, and ongoing risk review.
Cloud and Microsoft 365
Cloud Repatriation: When Moving Back Makes Sense
Cloud repatriation moves selected workloads from public cloud to on-premises, private cloud, or colocation. Learn when it makes sense and how to plan it.
Industries
Law Firm Data Breach: First 72 Hours in California
What a California law firm should do in the first 72 hours of a data breach: containment, who to call, ABA Opinion 483, and the 30 day notice rule.
Managed IT
IT Budget Planning for 2027: Small Business Guide
IT budget planning for 2027: a six line structure for small businesses, Microsoft's 2026 price changes, Windows Server 2016 end of support, and more.
Cloud and Microsoft 365
Conditional Access Policies: 5 to Start With
Five starter Conditional Access policies for small businesses on Microsoft 365, the licenses they need, and a report only rollout that avoids lockouts.
Cybersecurity
MFA Fatigue Attack: Why People Tap Approve
How an MFA fatigue attack works, why people approve the prompt, what happened at Uber and Cisco, and how number matching and phishing resistant MFA stop it.
Industries
CCPA Compliance Checklist for Small Businesses
A CCPA compliance checklist for 2026: current thresholds, request deadlines, reasonable security, vendor contracts, and the new audit and risk assessment rules.
Cybersecurity
Quishing: How QR Code Phishing Works
Quishing hides phishing links in QR codes that filters struggle to read. See real examples, why filters miss them, and the training and controls that work.
Cloud and Microsoft 365
Account Takeover Prevention for Microsoft 365
The Microsoft 365 settings that stop account takeover, in priority order: MFA, security defaults or Conditional Access, legacy auth, admin roles, audit logs.
Every guide, by topic
Cybersecurity
All 100 cybersecurity guides- Penetration Testing Cost for Small Business
- MSP vs MSSP: What Each Does and Which You Need
- October 2026 Firewall and VPN Exploits
- California Student Data Breach: Business Lessons
- Web Application Security Testing for SMBs
- How to Report Phishing in Outlook
- Notice of Privacy Practices: 2026 Guide
- Credential Stuffing: How to Spot and Stop It
- HIPAA Audit Preparation: What OCR Looks For
- Is Microsoft 365 HIPAA Compliant? BAA and Setup
- Is Zoom HIPAA Compliant? BAA and Settings Guide
- Holiday Cybersecurity Tips for Small Businesses
- HIPAA Compliant Fax and Texting for Practices
- HIPAA Compliant Email Providers: Buyer's Guide
- Section 508 Compliance: Standards and VPATs
- NIST 800-171 Explained: SPRS Scores and Compliance
- CMMC Compliance: Levels, Status and Requirements
- ADA Website Lawsuits and Demand Letters Explained
- Website Accessibility Audit: What It Includes
- HIPAA Training Requirements for Small Practices
- Is Google Workspace HIPAA Compliant? Setup Guide
- Managed Security Services for Small Business
- What Is a BAA? HIPAA Business Associate Agreements
- Incident Response Plan Template for Small Business
- Business Email Compromise: How BEC Attacks Work
- Ethical Walls & Matter-Level Access for Law Firms
- Outside Counsel Guidelines for Law Firm Security
- Infostealer Malware: How Attackers Skip Your MFA
- Email Authentication: Stop Anyone Sending as You
- Access Review: Who Still Has a Login You Forgot?
- Holiday Cybersecurity: What to Do Before You Close
- Cybersecurity Budget: Ignore the Percentage Rule
- Security Tool Sprawl: Paying More, Protected Less
- Security Culture: Why Written Policies Alone Fail
- Cybersecurity Framework: NIST, CIS or ISO?
- MTTD and MTTR: How Fast Is Your Security, Really?
- Website Security for Small Business: A Guide
- Is Your Business Email Actually Encrypted?
- Who Actually Manages Your Company Phones?
- What Are Passkeys? A Guide for Small Businesses
- Access Control: The 3 Models Explained Simply
- Physical Security for Small Business IT
- Domain Security Guide for Small Businesses
- Windows 11 Security Settings for Business
- Tabletop Exercises for Incident Response
- Printer Security: The Office Risk Nobody Watches
- What Is a Virtual CISO? A Small Business Guide
- EDR Security vs Antivirus: What Actually Changes
- Security Compliance: Why It Matters for SMBs
- Security Questionnaires: How to Respond as an SMB
- Extended Detection and Response (XDR), Explained
- Cyber Insurance for Small Businesses Explained
- Microsoft 365 Phishing Protection Explained
- Relying on a Managed Security Provider: The Truth
- Social Engineering Attacks and How to Stop Them
- Vendor and Third-Party Risk Management Explained
- Privileged Access Management (PAM) Explained
- Wireless Network Security: A Small Business Guide
- Data Classification: 4 Levels Every SMB Should Use
- Dark Web Monitoring: Does Your Business Need It?
- Beyond the Cybersecurity Audit: Staying Secure
- Healthcare Data Security in the Cloud: A Guide
- How Managed SIEM Helps Detect Insider Threats
- Managed Detection and Response (MDR): A Guide
- Data Loss Prevention: A Guide for Your Business
- The NIST Cybersecurity Framework: A Business Guide
- Phishing Simulations: A Strategy for Your Business
- How to Implement Network Security in Your Business
- Cyber Liability Insurance: A Small Business Guide
- Data Protection for Higher Education, Explained
- Practical Steps to Reduce BYOD Security Risks
- How Secure Is Your Network Firewall?
- Security Operations Center (SOC): A Business Guide
- Cyber Insurance Coverage Guide for Businesses
- How to Build a Business Disaster Recovery Plan
- Vulnerability Management: Scanning to Remediation
- Business Impact Analysis Steps: A Practical Guide
- RTO and RPO Explained: How to Calculate Them
- Ransomware Data Recovery: Strategies That Work
- Why Backup Testing Matters as Much as the Backup
- Business Continuity vs Disaster Recovery Explained
- IT Onboarding and Offboarding: Security Guide
- What Is a vCIO? Virtual CIO Services Explained
- SOX IT Compliance: Audit Trails and Data Integrity
- IT as a Growth Driver, Not a Cost Center
- AI Security Risks for Small Businesses: A Guide
- CapEx to OpEx: Shifting IT Spend for Control
- SEC Cybersecurity Rules: Incident Reporting Guide
- Secure File Sharing for Law Firms and Privilege
- ABA Cybersecurity Guidelines for Law Firms
- FTC Safeguards Rule Compliance for Advisors
- PCI DSS 4.0 Requirements, Now Enforced as 4.0.1
- FINRA Cybersecurity Compliance for Wealth Firms
- The 5 HIPAA Technical Safeguards, Explained
- Website Accessibility Compliance: ADA and WCAG
- Healthcare Security Risk Assessment Guide
- SOC 2 vs HIPAA: How They Differ and Work Together
Managed IT
All 82 managed it guides- Windows Server 2016 End of Life: Jan 12, 2027
- Office 2021 End of Support: What Ended Oct 13
- SSPR and Self Service Password Reset
- Choosing a Disaster Recovery Site in SoCal
- Business Internet Backup: Failover Options Guide
- EHR Downtime Procedures for Medical Practices
- Managed IT Services Pricing: Models and Costs
- Co-Managed IT Services: How the Model Works
- HIPAA Compliant Texting: Rules for Patient Texts
- IT Roadmap and Budget Planning for Small Business
- What Is an IT Assessment? Process and Report
- IT Help Desk Services: A Buyer's Guide for SMBs
- Section 179 for IT: Year-End Tech Purchase Guide
- Patch Management Guide and Policy for SMBs
- IT Provider Acquired? What the First 90 Days Show
- Windows 11 Security Settings Every Business Misses
- IT Vendor Management: How to End the Blame Loop
- MSP Onboarding Process: The First 90 Days
- Response Time vs Resolution Time in IT SLAs
- RAM Shortage 2026: Buy Business PCs Now or Wait?
- Section 179 Deduction: IT and the California Catch
- What Happens to Your Old Company Devices?
- Server Monitoring vs Management: The Difference
- 7 Questions to Ask a Disaster Recovery Provider
- 9 Backup Questions Every Business Owner Should Ask
- What Is SASE? A Guide for Multi-Site Businesses
- Network Traffic Monitoring and Who Needs It
- Are Your Security Cameras a Security Risk?
- Per-User vs Per-Device vs Tiered IT Pricing
- 10 Must-Have IT Disaster Recovery Plan Elements
- Structured Cabling: Why It Matters for Business IT
- Business Internet Speed: A Sizing Guide
- Computer Replacement Cycle Guide for Businesses
- Infrastructure Management for Business Continuity
- SaaS Backup: Why Your Cloud Apps Are Not Backed Up
- Office IT Relocation Checklist for Businesses
- BaaS vs DRaaS: Backup or Disaster Recovery?
- IT Onboarding Checklist for New Employees
- Windows 10 End of Support: Your Business Options
- Employee Offboarding: The IT Security Checklist
- Why Your Business Needs a Data Retention Policy
- Apple MDM for Small Business: What It Enforces
- Recovery Point Objective (RPO): A Plain Guide
- An Introduction to Telemetry and Visibility
- Modernizing IT to Help Your Association Grow
- What to Look for in 24/7 IT Support Services
- Certified Apple Managed Service Provider Guide
- Why Business Continuity Planning Is So Important
- Remote IT Support: How It Works and What to Expect
- Cloud Migration Process: A Step-by-Step SMB Guide
- Zero Trust Data Protection: Securing Your Backups
- Immutable Backups and Air-Gapping vs Ransomware
- The 3-2-1 Backup Rule Explained for Businesses
- Ransomware Incident Response: The First 24 Hours
- Microsoft 365 Security Settings Businesses Miss
- HIPAA Breach Notification Rule: The 60-Day Clock
- Surprise IT Bills: How to Make Costs Predictable
- Break-Fix vs Managed IT: Costs, Pros and Cons
- Service Level Agreements in Managed IT Contracts
- How to Exit a Bad MSP Contract (Without the Risk)
- HIPAA Compliance Checklist for Practices (2026)
- Server Virtualization: Hyper-V vs VMware vs KVM
- In-House IT vs Outsourced Managed IT Services
- Why One IT Guy Isn't Enough Anymore
- How to Choose the Right MSP: 15 Questions to Ask
- Hidden Costs of Switching MSPs and How to Switch
- IT Help Desk Tiers: How Tier 1 to Tier 3 Works
- Outgrown Your IT Provider? 12 Warning Signs
- Co-Managed IT vs Managed IT: How to Choose
- Phishing-Resistant MFA: Stop MFA Bypass Attacks
- Secure IT Asset Disposal Without a Data Breach
- Cost of IT Downtime: How to Calculate the Impact
- Business Email Compromise Prevention for Firms
- IT Asset Management Guide and Best Practices
- Ransomware Protection Strategies for Enterprises
- Hardware as a Service: Eliminate Hidden IT Costs
- Zero Trust Architecture Principles Explained
- Enterprise Password Management and MFA Guide
- HITRUST vs HIPAA: Key Differences for Compliance
- Prevent Common Business IT Problems Proactively
Industries
All 38 industries guides- California Data Breach Notification Law Guide
- Oracle Health Data Breach: Lessons for Practices
- Off-Channel Communications Compliance in 2026
- IT Support for Architects and Engineering Firms
- IT Support for Law Firms: Choosing a Provider
- IT Support for Nonprofits: A Guide for Lean Teams
- IT Support for Construction Companies: A Guide
- New Dental Practice IT Setup Checklist
- IT Support for Manufacturing: Uptime and OT
- Healthcare IT Support: Choosing for Your Practice
- Construction Project Records: Retention & Storage
- Can You Text Patients? HIPAA Communication Rules
- Legal Hold in Microsoft 365: The Licensing Trap
- Practice Acquisition IT: The First Week Checklist
- Dental Imaging Storage: Can You Open a 2019 Scan?
- IT Support for Architecture Firms, Built for CAD
- IT for Media and Entertainment Companies in LA
- Train Your Office Manager or Hire an MSP?
- Does HIPAA Require Security Awareness Training?
- Why Every Store Has a Different IT Problem
- Who Owns Security at Your Advisory Firm?
- Can Law Firms Use AI Without Risking Privilege?
- Retail Cybersecurity Risks: POS and E-Commerce
- IT for Manufacturing: OT and IT Security
- IT Support for Restaurants and Hospitality
- Data Security for Independent Insurance Agencies
- IT Support for Veterinary Practices
- Technology for Property Management Companies
- Nonprofit Technology on a Tight Budget
- IT Support for Construction Companies
- IT Services for Real Estate Brokerages
- Accounting Firm IT Support: A Practical Guide
- On-Site IT Support in Los Angeles: The Advantages
- Dental IT Support: What Dental Offices Need
- Mobile Edge Computing for Los Angeles Businesses
- Unified Communications (UC) Guide for Businesses
Cloud and Microsoft 365
All 32 cloud and microsoft 365 guides- Microsoft 365 Business Premium vs E3
- Cloud and Microsoft 365 Security with SSPM
- HIPAA Compliant Cloud Storage: Dropbox, Box & More
- Google Workspace to Microsoft 365 Migration Plan
- HIPAA Compliant Cloud Migration for Practices
- Server vs Cloud: Should You Replace or Migrate?
- Microsoft Nonprofit Licensing: Business Basic Gaps
- Cloud Desktops for SMBs: Windows 365 vs AVD
- SharePoint vs OneDrive vs Teams: One Simple Rule
- Choosing a Cloud Service Provider: The 3 Door Test
- Microsoft 365 Business Plans: July 2026 Pricing
- CASB: The Cloud Security Layer You May Already Own
- Microsoft 365 Defender: Using What You Pay For
- Unified Communications for Small Business: A Guide
- Multi-Cloud Backup: Do You Actually Need It?
- Cloud Provider Comparison: What to Ask First
- Does Your Business Actually Need EMS Licensing?
- Managed Cloud vs Self-Managed Cloud
- SharePoint vs Google Drive for Business
- Cloud Security Posture Management Explained
- Cloud Cost Management for Small Businesses
- Cloud Phone System Guide for Small Businesses
- High Availability and Redundancy Explained
- Why SMBs Are Moving to Cloud Document Storage
- What a Computer Server Does for Your Business
- The Evolution of Cloud Computing for Business
- Infrastructure as a Service: Benefits for Business
- Cloud vs On-Premises Backup: What's Best for You
AI and automation
All 14 ai and automation guides- Acceptable Use Policy: A Small Business Guide
- Is ChatGPT HIPAA Compliant? AI Rules for Practices
- AIOps Without the Hype: AI Your IT Should Use
- Power BI for Small Business: Real Cost and Effort
- AI Helpdesk: What It Handles and What It Cannot
- Spreadsheet Reporting vs Business Dashboards
- AI Agents for Business: A Practical Guide
- Website Chatbot Guide for Small Businesses
- Microsoft 365 Copilot: An SMB Readiness Guide
- Why Your Business Needs an AI Policy
- How IT Process Automation Cuts Human Error
- Why Your IT Provider Should Have AI Expertise
- Artificial Intelligence Fundamentals for Business
- Why Security Awareness Training Matters for SMBs