Resources
Plain-language guidance for small business owners and office managers — alongside in-depth thinking on Microsoft 365, zero trust, identity, and enterprise security architecture.
Compliance
June 9, 2026
8 min read
HIPAA doesn't name specific products, but it absolutely requires specific technical safeguards. Here's what the Security Rule actually expects from a small practice's IT — in plain language.
Read article →Compliance
June 9, 2026
8 min read
For VC, private equity, hedge funds, and family offices, cybersecurity has moved from an IT detail to a fundraising and operational due diligence issue. Here's what questionnaires actually ask — and how a small firm answers credibly.
Read article →Identity & Access
May 26, 2025
5 min read
A consistent IT onboarding process ensures new employees have the access they need on day one — and that access is appropriate, documented, and revocable. Here's what a practical small business onboarding checklist looks like.
Read article →Identity & Access
May 19, 2025
5 min read
Most small businesses don't have a consistent IT offboarding process. That means former employees often retain access to email, cloud storage, business software, and sensitive data long after they've left. Here's what to do instead.
Read article →Cybersecurity
May 14, 2025
7 min read
Business email compromise cost US businesses over $2.9 billion last year. Small businesses are not exempt — in many ways they're the easiest targets. Here's how these attacks work and what you can do to prevent them.
Read article →Managed IT
May 11, 2025
6 min read
Most small businesses handle IT informally — the most tech-savvy employee becomes the de facto IT person, or issues get resolved when they become unavoidable. Here's what that actually costs, and when managed IT makes financial sense.
Read article →Email Security
May 7, 2025
5 min read
SPF, DKIM, and DMARC sound technical — but they're the foundation of email security for any business. Without them, anyone can send email that looks like it came from your domain. Here's what they do and how to set them up.
Read article →Microsoft 365 Security
May 4, 2025
6 min read
Attackers who compromise Microsoft 365 accounts often stay quiet for weeks — reading email, setting up forwarding rules, and waiting for the right moment. Here's how to check whether your account has been accessed without your knowledge.
Read article →Microsoft 365 Security
April 30, 2025
6 min read
Most small businesses turn on MFA and consider themselves protected. But MFA without Conditional Access leaves significant gaps that attackers actively exploit. Here's what you're missing — and how to fix it.
Read article →Security Architecture
April 27, 2025
6 min read
Family offices face a distinctive threat profile — high-value targets, lean security teams, and principals who expect friction-free access. Here's how to build security that fits.
Read article →Device Management
April 21, 2025
6 min read
Intune is Microsoft's device management platform — and it's included with Microsoft 365 Business Premium. Here's what it actually does for small businesses, and whether the complexity is worth it.
Read article →Backup & Recovery
April 16, 2025
5 min read
Microsoft 365 is not a backup solution. Your email and files in OneDrive are protected against hardware failure — but not against accidental deletion, ransomware, or data corruption. Here's what you actually need.
Read article →Agentic AI Security
April 13, 2025
9 min read
AI agents that can retrieve, decide, and act introduce an entirely new security model. Here's what's different — and what you need to address before agents touch production data.
Read article →Cybersecurity
April 9, 2025
7 min read
Ransomware isn't just an enterprise problem. Attackers specifically target small businesses because defenses are weaker and the pressure to pay is high. Here's what a real ransomware attack looks like — and what you can do before it happens.
Read article →Cybersecurity
April 4, 2025
5 min read
Reused passwords and shared credentials are among the most common causes of business security incidents. A password manager solves both problems — here's how they work and what to look for.
Read article →Compliance
April 1, 2025
7 min read
SOC 2 has become a prerequisite for enterprise client relationships. Here's what Bay Area professional and financial services firms actually need to do — technically — to get there.
Read article →Security Architecture
March 17, 2025
8 min read
Financial services firms in San Francisco and the broader Bay Area face a threat landscape unlike most industries. Here's how zero trust changes the equation.
Read article →