5 IT Mistakes We See in Almost Every New Client's Office
Before we onboard a new client, we run a full assessment of their environment. The same five problems show up almost every time - regardless of industry or company size.
None of these are exotic problems. They're the kind of thing that builds up slowly while a business is busy running itself, and nobody notices until something breaks. If a few of these sound familiar, you're in good company - but they're also worth fixing before they cost you a bad day.
1. "Backup" that's really just a sync folder
A lot of businesses think they have a backup because their files live in OneDrive or Dropbox. That's sync, not backup. If a file gets encrypted by ransomware or accidentally deleted and the change syncs everywhere, your "backup" is gone too. A real backup is versioned, stored separately from your live data, and tested - meaning someone has actually confirmed a full restore works, not just assumed it does.
2. One password, reused everywhere, no MFA
We still find businesses where the same password is used for email, the file server, and the point-of-sale system - sometimes written on a sticky note for good measure. One leaked password from an unrelated website breach can open every door at once. Multi-factor authentication on email and any remote access is the single highest-impact fix we make on day one with new clients.
3. Nobody actually owns IT
In a lot of small businesses, IT decisions fall to whoever's best with computers - often someone with a full-time job that isn't IT. They're doing their best, but there's no one accountable for patching, monitoring, or planning ahead. Things get fixed reactively, after they break, instead of being caught before they do.
4. No documentation of what's actually running
Ask "what's our network setup?" at a lot of small businesses and you'll get a shrug. No diagram, no list of devices, no record of who has admin access to what. When something goes wrong, troubleshooting starts from zero instead of from a known baseline - which turns a 20-minute fix into a half-day one.
5. Critical systems running on borrowed time
Servers running operating systems that stopped getting security updates years ago. Software so old the vendor doesn't support it anymore. It keeps working right up until the day it doesn't, and by then it's an emergency instead of a planned upgrade.
None of these are difficult to fix once you know they're there. That's really what a free assessment is for - not a sales pitch, just an honest look at where things stand.