How we triage critical CVEs for clients
A practical way to rank vulnerability work using exposure, exploitation evidence, business impact, and change risk instead of CVSS alone.
#msp
12 articles
Incident first-hour checklist
A practical first sixty minutes for scoping an incident, stopping active harm, preserving evidence, securing identity, and giving leadership facts instead of guesses.
Shared admin secrets in a team vault
How small IT teams store shared admin passwords and API keys in a password manager without Spreadsheet-of-Doom habits.
A one-page network diagram that stays true
How to build a single network map your team will actually update after every change, not a shelf document from the last migration.
VoIP toll fraud: what to lock down
A vendor-neutral VoIP toll-fraud baseline covering dial permissions, admin access, SIP exposure, alerts, logs, and incident response.
Offboarding: make the access cut the same day
A practical same-day IT offboarding runbook for identity, sessions, SaaS, devices, shared secrets, and company data without deleting first and asking later.
Entra-only vs hybrid AD for small offices
A practical way for a 20-60 user firm to choose cloud-only identity, hybrid identity, and the right Windows device join without keeping domain controllers by habit.
Intune enrollment that doesn’t strand new hires
A practical Autopilot / Intune enrollment path for small Microsoft shops so day-one laptops join the tenant instead of becoming help-desk tickets.
MDM for company iPhones without the enterprise theater
A practical iPhone management baseline for small businesses: ownership, enrollment, passcodes, updates, managed apps, loss, and offboarding.
Google Workspace security baseline for small teams
A practical Google Workspace baseline for 10-50 users: enforced 2-Step Verification, safer administrators, controlled sharing, OAuth review, devices, and alerts.
RMM alert fatigue: what to silence
When your PSA is full of noise, operators stop seeing real incidents. A practical filter list for SMB RMM alerting.
Copilot for Microsoft 365 in SMB reality
What Copilot actually costs, how it uses your tenant data, and when it helps small teams versus generating expensive drafts nobody trusts.