Confirm Who Owns Access
I identify the people and accounts controlling Microsoft 365, domains, websites, file storage, network equipment, backups, and other systems the business depends on.
Small Business Security Review
I find ordinary security gaps: old admin accounts, former users, weak email protection, untested backups, and outdated computers.
Find The First Priorities
A practical owner review that shows what to fix first. It is not a compliance audit.
Check Everyday Protection
I review MFA, administrator roles, updates, endpoint settings, email safeguards, shared access, backup status, and the recovery information attached to important accounts.
Prioritize The Work
You receive a short list separated into urgent fixes, near-term improvements, and items that can wait. I explain the business reason for each recommendation.
Six Useful Questions
I review ownership, devices, protection, alerts, response contacts, and recovery.
Owners, administrators, vendors, and employees need clear responsibilities.
Critical accounts, devices, data, and customer-facing systems are identified first.
MFA, updates, least-needed access, safer email, and tested backup reduce avoidable exposure.
Alerts, account activity, endpoint warnings, and vendor notices need an owner.
The response list should include the owner, IT contact, bank, insurer, vendors, and legal help when applicable.
Backups, restore testing, replacement plans, and account recovery paths matter before an incident.
For owner education, I also point clients to the CISA small-business resources and the NIST small-business quick-start guidance.
A Usable Priority List
You receive a short owner-friendly list, not a long scan report.
- Urgent account or access issues
- Thirty-day security improvements
- Account and vendor ownership notes
- Questions requiring a specialist or insurer
Security Review Questions
Is this a penetration test or compliance audit?
No. This reviews practical controls, ownership, Microsoft 365, backups, and response readiness. Regulated businesses may need a specialist.
What should a small business fix first?
The first priorities usually protect the accounts and systems that could stop the business: administrator access, MFA, former-user access, supported and updated computers, email protection, and a backup that can actually be restored. The order depends on your operation.
Start With Priorities
Tell me the number of people, computers, locations, and Microsoft 365 accounts.