July 20, 2026
Is Microsoft 365 Business Premium worth it for a 15-person office?
What the roughly $10 per user per month jump from Business Standard to Business Premium actually buys, and when Standard is genuinely enough.
July 15, 2026
Security awareness training a 20-person company will actually complete
The annual 45-minute security slideshow fails because it is designed for auditors, not employees. Short monthly training and blame-free phishing simulations work better and cost less than most owners expect.
July 8, 2026
DMARC, SPF and DKIM: the 3 DNS records protecting your company's name
Criminals can send email that looks exactly like it came from your domain unless 3 DNS records say otherwise. Here is what SPF, DKIM and DMARC do and how to roll them out without breaking your own mail.
July 1, 2026
Shadow IT discovery and the SaaS inventory conversation nobody wants to start
A practical guide to shadow IT discovery for small businesses, covering how to find ungoverned SaaS apps and unreviewed OAuth grants, triage them by data sensitivity and build a request path so it does not just recur.
April 20, 2026
Application allowlisting for the small-business reality
A practical view of application allowlisting at the mid-market — what it protects against, why most mid-market firms don't need it yet and when the calculation actually flips.
April 20, 2026
Endpoint privilege management without breaking your users
A practical approach to removing local admin rights from workstations at mid-market firms, with just-in-time elevation, approval workflows and rollout sequencing that users will actually tolerate.
April 20, 2026
Microsoft 365 security baselines, the 10 settings that matter most
The 10 Microsoft 365 security configuration changes that reduce risk most at the mid-market level, with honest notes on which require E5 and which work on E3 or Business Premium.
April 20, 2026
SIEM at the mid-market, when it's worth it, when it's overkill
A practical read on SIEM for mid-market firms — what the technology actually does, when the cost is justified and the three alternatives most firms should evaluate first.
April 19, 2026
MDR vs SOC-as-a-service vs running it yourself
A practical decision framework for mid-market firms choosing between managed detection and response, SOC-as-a-service and building an in-house SOC.
April 19, 2026
EDR vs antivirus: what actually changed and what still matters
Your cyber insurance carrier is asking about EDR because traditional antivirus stopped being enough around 2017. Here's the practical difference and what to deploy.
April 19, 2026
Password managers for small business: why, which and how to roll one out
A 25-person firm can deploy a business password manager in under two weeks and eliminate the worst category of credential risk. Here's the plan.