Evening Computing

If your email is working, are your contacts and calendar protected too?

A small business can use the same email setup for years without any obvious problem.

Messages arrive. Email works on the computer and phone. Everything can appear to be synchronised.

But that does not necessarily mean your contacts and calendar are stored, synchronised or protected in the same place.

This is particularly relevant with hosted email accounts using IMAP.

IMAP is mainly used to access and synchronise email. Contacts and appointments may instead be stored in Outlook, on a phone, in Google, iCloud, Microsoft 365 or somewhere else entirely.

The difference often only becomes obvious when a computer is replaced, Outlook is reconfigured, a phone is changed, another person needs access or someone leaves the business.

There is also a separate question about backup.

An email provider may have resilient storage, deleted-item retention and other recovery features, but that is not automatically the same as having an independent backup covering the information your business actually needs to recover.

A useful question is:

If this computer or account disappeared today, where would your email, contacts and appointments come back from?

Our new guide looks at personal email accounts, hosted IMAP email, contacts and calendars, account ownership, shared access, Microsoft 365, Google Workspace and backup:

https://itsupportforsmallbusinessesinlondon.net/small-business-email-setup-checks/

Does a VPN make everything you do online safer?

VPNs are often presented as broad online security tools.

They can provide useful security and privacy benefits, but their role is more specific than some marketing can suggest.

A consumer VPN creates an encrypted connection between your device and the VPN provider. This can reduce what the local network or internet provider can directly observe, and websites will normally see the VPN provider’s public IP address rather than the address of your original connection.

But a VPN does not make everything you do online safe.

It does not make a fraudulent website trustworthy, prevent phishing, protect a device that is already compromised or replace software updates, browser security, account protection or backup.

There can also be a performance trade-off.

Because your internet traffic takes an additional path through the VPN provider, server location, server load and wider internet routing can affect speed and latency. This may be more noticeable during phone calls, video meetings, remote desktop sessions or other interactive services.

So the useful question is not simply:

“Should I use a VPN?”

It is:

“What am I trying to protect, and is a VPN the right control for that part of the connection?”

Our guide looks at what VPNs protect, what they do not protect, how HTTPS and DNS fit alongside them, and why a VPN can sometimes affect internet performance:

https://itsupportforsmallbusinessesinlondon.net/what-does-a-vpn-protect-you-from/

Do you have a simple way to review your Microsoft 365 setup?

Microsoft 365 often starts with email and a few accounts.

Over time, it can become much more than that.

Files may move into OneDrive and SharePoint. New people join. Others leave. Devices are added. Applications are given access. Suppliers or guests may be invited in. Security settings and licences can change too.

So it is useful to review the wider setup from time to time, rather than only checking whether email and Microsoft 365 apps are working.

Some of the areas worth looking at include:

• Who has administrator access?
• Are everyday accounts separate from administrator accounts?
• Is multi-factor authentication configured appropriately?
• Which applications have permission to access company information?
• Are business devices being managed and reviewed?
• Is important Microsoft 365 data backed up independently?
• Is useful auditing and monitoring in place?
• Does existing access still have a current business reason?

Not every small organisation needs exactly the same configuration.

The aim is to understand what is in place, what still has a purpose and what may need to be reviewed.

We have put together a practical guide covering the main areas to consider when reviewing a Microsoft 365 setup for a small business:

https://itsupportforsmallbusinessesinlondon.net/microsoft-365-security-setup-small-business/

Is the problem with your device really just the device?

A problem may first appear on one laptop, printer, phone or other device.

At first, it can seem like the issue is only with that one device.

But sometimes the real cause sits somewhere else.

It may involve:

a shared email account or sign-in
cloud files
a business application
WiFi or network access
a printer connection
another shared service used by more than one person

Sometimes the issue really is limited to one device.

At other times, the device is simply where the wider problem first shows up.

So the useful question is not only:

“What is wrong with this device?”

It is also:

“What shared account, service or system does it depend on?”

Good IT support is not only about fixing what appears on the device. It is also about checking what sits behind it and what else may be affected.

Read more about our IT support:

https://itsupportforsmallbusinessesinlondon.net/it-support/

Does your network know the difference between staff, guests and smart devices?

WiFi is often judged by whether people can connect and whether the signal is strong.

But another question matters too.

Who or what can reach the sensitive parts of the network once connected?

In a small office, clinic, shop, workshop, shared workspace or home office, the same environment may include staff laptops, personal phones, guest devices, printers, card machines, CCTV cameras, smart TVs, door systems, supplier equipment and family devices used nearby.

They may all need some form of connection.

But they do not all need the same level of access.

A staff laptop may need access to business systems.
A guest phone may only need internet access.
A card machine may need payment-related connectivity.
A camera, smart TV or door system may only need limited access.
A family device at home may not need access to work systems at all.

Good wireless and network design should consider people, devices, roles, guest access, payment equipment, smart devices, access point isolation, VLANs, firewall rules and ongoing review.

The aim is not to make the network complicated.

The aim is to make access intentional.

Our wireless network design and deployment page explains why WiFi should be reviewed as part of the wider network, not just treated as a signal problem.

https://itsupportforsmallbusinessesinlondon.net/wireless-network-design-and-deployment/

Has your WordPress website only been updated, or also checked?

When a serious WordPress security update is released, installing the update is an important step.

But it may not answer every question.

If a vulnerability was being actively exploited before the update completed, the website may also need to be checked for unexpected administrator accounts, unfamiliar plugins, altered files, suspicious uploads or other changes.

This does not mean every WordPress website has been compromised.

It means that website maintenance should not be treated as only pressing the update button.

A WordPress website depends on several layers: WordPress core, plugins, themes, administrator access, the hosting account, domain access, backups and connected services.

Our guide explains the main areas small organisations should review when hardening a WordPress website, and why updates, access control, backups and recovery all matter.

https://itsupportforsmallbusinessesinlondon.net/wordpress-hardening-small-organisations/

Is Cyber Essentials worth it for small businesses and charities?

Evening Computing has renewed Cyber Essentials certification for another year.

We see Cyber Essentials as a useful security baseline, not a guarantee that nothing can go wrong.

The value is not only in the certificate. The value is in the attention it brings to practical controls that are often assumed, forgotten, inconsistently applied or left undocumented.

For small businesses and charities, that can be especially useful.

The process asks important questions about supported devices, software updates, malware protection, MFA, administrator access, firewall settings, cloud services and mobile device use.

Those areas may sound basic, but they are often where avoidable weaknesses begin.

Cyber Essentials should not replace wider security planning. Email validation, backups, recovery testing, supplier review, staff awareness and ongoing IT oversight still matter.

But as a baseline, it helps turn security from a vague concern into a set of practical checks that can be reviewed, improved and maintained.

Our new guide explains why Cyber Essentials can still be worthwhile for small organisations and charities, and where its limits should be understood.

https://itsupportforsmallbusinessesinlondon.net/cyber-essentials-small-organisations/?utm_source=chatgpt.com

Can an IT risk exist even when everything appears to be working?

A business system can continue operating normally while an important protection behind it has stopped doing its job.

During a review of an established business, the accounting software was working and financial transactions were being entered each day. The business also believed its data was being backed up.

However, the backup had been saved on the same device that ran the accounting software.

This meant the live data and backup shared the same point of failure. If that device had failed, been damaged, corrupted or affected by a security incident, both copies could have been lost.

The system was available, but the organisation’s ability to recover was not protected independently.

A useful backup should be stored separately from the live system, protected by appropriate security controls, monitored, versioned and tested to confirm that data can be restored within the time the organisation needs.

A successful backup message does not by itself prove that the business can recover.

Business continuity planning asks a wider question:

If an important system stopped working today, what would the organisation need to continue operating and recover safely?

Our IT Support in Nazeing page explains how apparently isolated technology issues can involve wider systems, security arrangements, backups and continuity planning.

https://itsupportforsmallbusinessesinlondon.net/it-support-nazeing/

Can a familiar WhatsApp sender or file name still be unsafe?

A message may arrive inside an existing conversation, show the correct contact name and profile photograph, and include a file called Invoice, Account Statement or Payment Details.

That can make the message look genuine.

However, WhatsApp can show which account sent the message. It cannot prove that the usual owner was controlling that account at the time.

If the account or one of its linked devices has been compromised, someone else may be able to send messages to contacts who already trust that person.

The file name and icon are also only labels. They do not confirm what the file contains or what may happen when it is opened.

An unexpected attachment should therefore be checked through a separate communication route that you already know is genuine, especially where the message involves money, changed payment details, passwords, verification codes or account recovery information.

Our WhatsApp Security Guide explains how linked device checks, account protection, backup security, software updates and careful handling of messages work together.

https://itsupportforsmallbusinessesinlondon.net/whatsapp-security-guide/

When IT grows gradually, small problems can become harder to understand.

Many small organisations start with a few computers, one email system, a router, a printer and some shared files.

Over time, more services are added. Microsoft 365, Google Workspace, WiFi, backups, security settings, supplier accounts, cloud storage and remote access may all become part of the same working environment.

When something stops working, the cause may not be obvious. A sign in issue, email problem, slow connection, file access problem or security concern may involve more than one system.

This is where structured IT support can help. It looks at how systems fit together, who depends on them, and what may need ongoing oversight, review or practical implementation rather than treating every issue as an isolated fault.

Our IT Support page explains how support works when business critical systems affect more than one user or shared service.

https://itsupportforsmallbusinessesinlondon.net/it-support/