ITtipsforsmallbusiness.
Guides to computers, networks, email, security, and backups, written for small-business owners in Orange County.
Dental Office IT Checklist: Software, Imaging, Backups
A working IT checklist for dental offices: what Dentrix, Eaglesoft, Open Dental and Curve require, imaging PCs, backups, and HIPAA settings to verify.
Read arrow_right_altMedical Office IT: HIPAA Technical Safeguards Guide
What the HIPAA Security Rule's technical safeguards mean as real settings for a medical office, plus what is law today and what HHS has only proposed.
Read arrow_right_altPilates Studio Tech Guide: Booking, Wi-Fi, and Payments
How to choose and set up Pilates studio technology: booking platforms compared, front desk hardware, Wi-Fi around metal equipment, music, and card data.
Read arrow_right_altYoga Studio Livestream and Client Data Setup Guide
How to set up livestream and on-demand yoga classes, run retail sales, handle waivers and student data under California law, and manage shared devices.
Read arrow_right_altIT Guide for Architecture Firms: Revit Specs and Backup
IT guide for small architecture firms: Revit and AutoCAD workstation specs, where project files should live, plotters, licensing, and archive backup.
Read arrow_right_altMicrosoft Bookings for Small Business: Setup and Limits
Which Microsoft 365 plans include Bookings, how to set up a shared booking page, how it works with Teams and Outlook, its limits, and alternatives.
Read arrow_right_altVeterinary Clinic IT Guide: Software, Records, Checklist
An IT guide for veterinary clinics: cloud and server practice software, imaging storage, lab links, California record rules, DEA logs, and a checklist.
Read arrow_right_altTitle Company IT Checklist: Wire Fraud and ALTA Pillar 3
An IT guide for title and escrow offices: wire fraud controls, what ALTA Best Practices Pillar 3 requires, a copyable checklist, and provider questions.
Read arrow_right_altNetwork monitoring for small business: what to watch
What small business network monitoring checks, how SNMP and cloud controllers work, which alerts are worth having, and free and paid tools with prices.
Read arrow_right_altPower Automate for Small Business: Costs and 5 Flows
What Power Automate includes with Microsoft 365, when you need the $15 Premium license, five small-office flows step by step, and basic governance.
Read arrow_right_altCCPA for Small Business: Who Must Comply and IT Controls
Current CCPA thresholds, the 2026 rules on risk assessments and cybersecurity audits, and a checklist of IT controls for California small businesses.
Read arrow_right_altMicrosoft Purview for Small Business: What You Get
What Microsoft Purview is, which parts Business Premium includes (labels, DLP, retention, audit), and a sensible starter setup for a small office.
Read arrow_right_altVulnerability Scanning for Small Business: A Plain Guide
What a vulnerability scan is, how it differs from a penetration test, how often to run one, and what PCI DSS, the FTC, and insurers ask for.
Read arrow_right_altHIPAA IT Checklist for Therapists and Small Practices
A plain-English IT guide for therapists: HIPAA Security Rule basics, business associate agreements, telehealth, EHRs, email, encryption, and California law.
Read arrow_right_altShadow IT in a Small Business: How to Find and Manage It
How to find the unapproved apps your staff already use, with menu paths for Microsoft 365 and Google Workspace, and a light approval process.
Read arrow_right_altNIST Cybersecurity Framework 2.0 for Small Business
A plain-English guide to NIST CSF 2.0 for small businesses: the six functions, the free NIST quick-start guide, a controls checklist, and a 12-month plan.
Read arrow_right_altWindows 365 Cloud PC for Small Business: Cost and Fit
Windows 365 editions and current list prices by size, Cloud PC vs Azure Virtual Desktop vs a laptop, licensing rules, and who it does and does not suit.
Read arrow_right_altAI Phishing, Voice Cloning and Deepfakes: What Still Works
How AI-written emails, cloned voices, and deepfake video change phishing for small businesses, and which defenses still work when a fake looks perfect.
Read arrow_right_altEmail Spam Filtering for Small Business: How It Works
How inbound spam filtering works in Microsoft 365 and Google Workspace, what each plan includes, and how to manage quarantine and allow lists safely.
Read arrow_right_altMicrosoft Intune for Small Business: Plans and Setup
What Microsoft Intune manages, which Microsoft 365 plans include it, how enrollment works on Windows, Apple, and Android, plus compliance and Autopilot.
Read arrow_right_altAuto Dealership IT Guide: FTC Safeguards Rule and DMS
IT guide for auto dealers: what the FTC Safeguards Rule requires technically, planning for a DMS outage, and separating service bay and guest Wi-Fi.
Read arrow_right_altMicrosoft 365 Email Archiving: Plans, Setup, and Limits
How Microsoft 365 archive mailboxes work, which plans include them, auto-expanding archives, retention vs Litigation Hold, and why archiving is not backup.
Read arrow_right_altInsurance Agency IT Checklist: California Security Rules
An IT guide for California insurance agencies: the written security program state rules require, where the NAIC model law stands, risks, and a checklist.
Read arrow_right_altManaged IT Services Cost for Small Business: 2026 Guide
What managed IT costs a small business in 2026: sourced per-user, per-device, and hourly ranges, a 10-person example, and the costs people forget.
Read arrow_right_altOutsourced IT vs In-House Hire: A Small Business Guide
Compare hiring an IT employee, outsourcing, and a hybrid of both, using Bureau of Labor Statistics salary data for the Los Angeles and Orange County area.
Read arrow_right_altMicrosoft 365 Business Premium vs Standard vs Basic
Compare Microsoft 365 Business Basic, Standard, and Premium: September 2026 prices, what Premium adds for security, the 300 user cap, and how to choose.
Read arrow_right_altCloud Migration for Small Business: Plan and Checklist
A phased cloud migration plan for small businesses moving email and files to Microsoft 365, with a cutover checklist, common pitfalls, and timelines.
Read arrow_right_altEmail Encryption for Small Business: Microsoft 365 and Gmail
TLS versus message encryption, which Microsoft 365 and Google Workspace plans include it, setup steps for Purview Message Encryption, and a checklist.
Read arrow_right_altIncident Response Plan for Small Business: A Template
A one to two page incident response plan template for a small business, with roles, a contact list, first-hour steps, and how it maps to NIST SP 800-61.
Read arrow_right_altProperty Management IT Guide: Tenant Data and Access
IT guide for California property managers: securing AppFolio, Yardi or Buildium logins, tenant data duties, payments, and cameras and door access.
Read arrow_right_altConditional Access in Microsoft 365: A Small Office Guide
Conditional Access licensing, five starter policies for a small office, how report-only mode works, and why a break-glass account comes first.
Read arrow_right_altDNS Filtering for Small Business: How It Works and Options
How DNS filtering blocks malicious sites, free and paid options compared, how to set it up on a router or per device, and the limits to expect.
Read arrow_right_altOneDrive for Business: Sync, Sharing, and Restore
Set up OneDrive for a small business: the sync app, Known Folder Move, Files On-Demand, sharing controls, restore options, and why it is not a backup.
Read arrow_right_altSmall business firewall: features, licensing, and sizing
What a business firewall does beyond an ISP router, which features matter, how subscriptions work, and how to size one for your internet speed.
Read arrow_right_altMicrosoft Defender for Business: Features, Cost, and Setup
What Microsoft Defender for Business includes, what it costs standalone or in Business Premium, how setup works, and the limits to know first.
Read arrow_right_altPCI DSS for Small Business: SAQ Types and IT Checklist
How PCI DSS v4.0.1 applies to a small business that accepts cards: which SAQ fits, what became mandatory on March 31, 2025, and the IT controls to check.
Read arrow_right_altBYOD Policy for Small Business: A Copyable Outline
A BYOD policy outline you can copy, with privacy boundaries, app protection without enrolling personal phones, and California reimbursement rules to check.
Read arrow_right_altIT Onboarding and Offboarding Checklist for Small Business
Copyable IT checklists for a new hire's first day and an employee's last day: accounts, licenses, devices, shared mailboxes, forwarding, and retention.
Read arrow_right_altRestaurant IT Guide: POS, Network, Failover and PCI
A practical IT guide for restaurants: POS and kitchen display networks, guest Wi-Fi isolation, cellular internet failover, PCI DSS scope, and a checklist.
Read arrow_right_altMicrosoft Entra ID for Small Business: Plans and Settings
What Microsoft Entra ID is, which edition your Microsoft 365 plan includes (Free, P1, or P2), what security defaults do, and eight settings to check.
Read arrow_right_altIT Checklist for Financial Advisors: Reg S-P and Security
A plain-English IT guide for RIAs and advisors: what amended Regulation S-P requires, email retention rules, the main risks, and a checklist to copy.
Read arrow_right_altZero Trust for Small Business: Plain English and First Steps
Zero trust explained without jargon, based on NIST SP 800-207 and CISA's maturity model, with a step-by-step plan a small office can actually follow.
Read arrow_right_altIT Disaster Recovery Plan for Small Business: A Template
What a small business IT disaster recovery plan contains: RTO and RPO with a worked example, a one page outline to copy, SoCal risks, and test cadence.
Read arrow_right_altSharePoint for Small Business: Sites, Storage, Migration
How SharePoint, OneDrive, and Teams files fit together, how permissions and the storage formula work, and how to move a small office off a file server.
Read arrow_right_altNetwork segmentation for small business: a VLAN starter plan
VLANs explained in plain English, a starter layout for staff, guests, cameras, payment terminals, and servers, and how segmentation reduces PCI DSS scope.
Read arrow_right_altMobile Device Management (MDM) for Small Business
A vendor-neutral guide to MDM for small offices: MDM vs MAM, Apple Business, Android Enterprise, Intune, Jamf, Iru, and Google options, and how to choose.
Read arrow_right_altVoIP Phone Systems for Small Business: Cost, Network, E911
How business VoIP works, hosted vs on-premise, bandwidth per call, QoS, E911 rules, number porting timelines, and published per-user prices from providers.
Read arrow_right_altMicrosoft Teams for Small Business: A Practical Setup
How to set up Microsoft Teams for a small office: teams and channels, chat vs channels, guest access, Teams Phone pricing, and where recordings are stored.
Read arrow_right_altBusiness Security Cameras: NVR vs Cloud, Storage, Privacy
Plan a small business camera system: NVR vs cloud, PoE, resolution, a worked storage calculation, network isolation, NDAA, and California privacy.
Read arrow_right_altDark Web Monitoring for Small Business: Is It Worth It?
What dark web monitoring really does, the free tools that cover most small businesses, what to do when a password shows up, and when paying makes sense.
Read arrow_right_altPatch Management for Small Business: A Practical Policy
A working patch policy for a small office: what to update, how fast, how to stage Windows updates with Intune rings, and how to handle apps and firmware.
Read arrow_right_altCyber Insurance for Small Business: What Carriers Ask
What cyber insurance covers for a small business, the security questions on real applications (MFA, backups, patching), and how to read the exclusions.
Read arrow_right_altBusiness Email Compromise: Stop Invoice and Payment Fraud
How business email compromise gets offices to pay the wrong account, the verification steps that stop it, and what to do in the first hour.
Read arrow_right_altHow to Run Security Awareness Training in a Small Business
A practical guide to security awareness training for small offices: topics, a yearly schedule, phishing simulations, licensing, and what to measure.
Read arrow_right_altAccounting Firm IT Guide: WISP, IRS and FTC Checklist
What the IRS and the FTC Safeguards Rule require from a tax or accounting firm's IT, with a copyable checklist and questions to ask any IT provider.
Read arrow_right_altEndpoint Protection for Small Business: AV vs EDR vs MDR
Antivirus, EDR, and MDR explained in plain English, with a decision table, what each costs, and the questions to ask before you buy endpoint protection.
Read arrow_right_altMicrosoft 365 Copilot for Small Business: Cost and Fit
What Copilot Chat includes free, what Microsoft 365 Copilot Business costs in September 2026, what to clean up before enabling it, and when to skip it.
Read arrow_right_altRetail Store IT Checklist: POS, PCI, Wi-Fi and Cameras
An IT checklist for independent retail shops: POS and inventory, PCI DSS scope, guest Wi-Fi isolation, cameras, online store sync, and seasonal staff accounts.
Read arrow_right_altFTC Safeguards Rule: Small Business IT Requirements
Who the FTC Safeguards Rule covers, what the under-5,000-consumer exemption removes, the 30-day breach report, and an IT checklist for small firms.
Read arrow_right_altContractor IT Checklist: Field Devices, Email, Backup
IT checklist for contractors: field phones and tablets, jobsite internet, Procore or Buildertrend, QuickBooks, invoice fraud, and record backup.
Read arrow_right_altNonprofit IT Guide: Discounts, Donor Data, Volunteers
Nonprofit IT guide: current Microsoft and Google nonprofit offers after the 2025 grant changes, TechSoup, donor data and PCI, and volunteer accounts.
Read arrow_right_altReal Estate Office IT Checklist: Wire Fraud and Records
IT checklist for California real estate offices: wire fraud defenses, MLS and transaction logins, agent-owned devices, and the DRE three-year record rule.
Read arrow_right_altLaw Firm IT Checklist: Ethics Rules and Security Basics
A plain-English IT guide for small California law firms: what the ethics rules expect from your technology, the main risks, and a checklist you can copy.
Read arrow_right_altHIPAA IT Compliance for Medical and Dental Practices
What the HIPAA Security Rule requires of a small practice's IT today, what the 2025 proposed update would change, current penalty amounts, and a checklist.
Read arrow_right_altDo You Need to Back Up Microsoft 365? What Microsoft Keeps
What Microsoft 365 keeps after a deletion, what retention policies and Microsoft 365 Backup do, and how to choose and test a backup for a small office.
Read arrow_right_altPassword Manager for Small Business: How to Choose
How to choose and roll out a business password manager, with current list prices for 1Password, Bitwarden, and Keeper, plus where passkeys fit in.
Read arrow_right_altSecure remote access for small business: VPN, ZTNA, or RDP
Compare VPN, zero trust network access, and remote desktop gateways, see why exposed RDP is dangerous, and pick a secure setup for a small office.
Read arrow_right_altWhat to Do After a Data Breach: A Small Business Timeline
An hour by hour and day by day response to a data breach for a California small business, including the 30 day notice rule and Attorney General reporting.
Read arrow_right_altWindows 10 End of Support: A Small Business Action Plan
Windows 10 support ended October 14, 2025. What that means for a small business now, how to check Windows 11 eligibility, ESU costs, and a rollout plan.
Read arrow_right_altHow to choose a local IT company: checklist and questions
A neutral checklist for choosing an IT company: what to verify, questions to ask any provider, small versus larger firms, and contract terms to check.
Read arrow_right_altServer vs cloud for small business: how to decide
A workload-by-workload guide to keeping a server or moving to the cloud, with a decision table, cost factors, and Windows Server end-of-support dates.
Read arrow_right_altShould Your Small Business Use Linux? An Honest Guide
Where Linux fits in a small business (servers, single-purpose PCs, older hardware), where it does not, and how long each major distribution is supported.
Read arrow_right_altHow to switch IT providers: a step-by-step handover plan
A practical plan for changing IT providers without downtime: what documentation and credentials to collect, how to transfer admin access, and a timeline.
Read arrow_right_altSmall business data backup: the 3-2-1 rule explained
A practical backup guide for small businesses: the 3-2-1 and 3-2-1-1-0 rules, what to back up, local vs cloud, immutability, restore tests, and costs.
Read arrow_right_altMicrosoft 365 vs Google Workspace for small business
A fair comparison of Microsoft 365 and Google Workspace for small business: September 2026 prices, strengths of each, switching costs, and how to decide.
Read arrow_right_altHow to spot a phishing email: a checklist for staff
A plain-English checklist for spotting phishing emails: what to check in the sender, links, and request, how to report one, and what to do if you clicked.
Read arrow_right_altSmall business ransomware protection and recovery plan
A ransomware plan for small businesses based on CISA guidance: how attacks get in, which controls matter, backups that survive, and first steps.
Read arrow_right_alt12 signs your small business needs IT support: a self-check
Twelve observable signs that a small business has outgrown do-it-yourself IT, with a yes or no self-assessment and guidance on what kind of help fits.
Read arrow_right_altSmall business IT checklist: 45 items, with the why
A complete, copyable IT checklist for small businesses, grouped by accounts, devices, network, backup, security, vendors, and documentation.
Read arrow_right_altWhat is managed IT? Models, inclusions, and who needs it
Managed IT explained for small businesses: the four common support models, what is usually included and excluded, and who does not need it.
Read arrow_right_altMulti-factor authentication: methods ranked and setup
MFA methods ranked from passkeys to text codes, with current steps for Microsoft 365 and Google Workspace and a rollout plan that avoids lockouts.
Read arrow_right_altBusiness email going to spam? Fix SPF, DKIM, and DMARC
Why your business email lands in spam and how to fix it in order: SPF, DKIM, DMARC, the Gmail, Yahoo, and Outlook sender rules, and blocklist checks.
Read arrow_right_altOffice Wi-Fi keeps dropping: how to diagnose and fix it
A troubleshooting guide for office Wi-Fi drops: tell Wi-Fi, internet, and DNS faults apart, test each likely cause with free tools, and apply the fix.
Read arrow_right_altGet in touch
Talk with Noah
Tell me about your business and what is getting in the way. A recurring problem, an upcoming project, or a setup you would like a second opinion on.
noah@coastalgrowthco.comNoah Stegman · Coastal Growth Co.
Thanks for getting in touch.
Your message was submitted. I will review it and reply by email.