Practical notes from the work: what actually goes wrong, and what to do about it.
Forgotten passwords and damaged wallets can often be recovered. Stolen crypto almost never can — and the people promising otherwise are frequently running a second scam. Here's how to tell the difference.
Most businesses have backups. Far fewer have ever restored one. A restore test takes a few hours and tells you the only number that matters: how long it actually takes to get back to work.
An AI assistant that reads your email and can take actions is a new kind of system inside your business. It can be given instructions by anyone who can get text in front of it. That's prompt injection — and it's the first thing to design against.
Spam in your search results, a red browser warning, or redirects you didn't set up. Here's what to do in the first day — in the right order — so the site gets cleaned once, not three times.
When a business needs software built, the first instinct is to hire. Sometimes that's right. Often the maths only works if you ignore recruiting time, the skills one person can't cover, and what happens after the build.
Turning on multi-factor authentication is the single most effective security step most businesses can take. But the kind you choose matters. Here's how the common options hold up against the attacks actually in use.
Security questionnaires usually arrive just as a deal is about to close. The instinct is to answer generously. That's the one genuinely risky option. Here's how to answer accurately and still win the contract.
A separate guest network name feels like separation. Often it isn't — it's a second label on the same network as your file server, printers and cameras. Here's how to tell, and how to fix it.
When someone leaves, most businesses disable their email and consider it done. Access survives in a surprising number of other places. Here's where to look, and a checklist HR can run on the last day.
Staff are already using AI tools on real work, whether or not there's a policy. The risk isn't the technology — it's which account the data goes through. Here's what actually differs, and how to fix it.
If personal information your business holds is lost, stolen or accessed without authorisation, Quebec's Law 25 imposes specific obligations. Here is what they are, in plain language — and the preparation that makes them manageable.
The most expensive email scams contain no malware and no suspicious link. They arrive inside a real conversation, from a real address. Here's how to recognise them — and the procedural control that works when recognition fails.
Your email and files live in the cloud, so they must be backed up — right? Not in the way most businesses assume. Here is what Microsoft and Google actually protect, and the gap they leave.
What to do in the first sixty minutes of a ransomware incident — and the three common reactions that destroy evidence or make recovery harder.
You get a senior engineer on the first call, not a salesperson. If we are not the right fit, we will say so and point you somewhere better.
Active incident? Write “URGENT” in your message and we prioritise it.