Minimum Recommended Technology Platform
Good IT doesn’t have to be complicated, but it does need a solid foundation. Below is the baseline we recommend every business has in place — not as a wish list, but as the minimum needed to keep things running smoothly, securely, and without nasty surprises.
Workstations and devices
Aim to keep devices no more than four to five years old, running a currently supported operating system with updates kept current. Older machines tend to slow everyone down and can fall out of vendor support, which means missing out on important security patches. As a minimum, look for a modern multi-core processor, 16GB of RAM, and solid-state storage rather than a traditional hard drive.
Operating systems and software
Keep operating systems and business software genuine, licensed, and on a version that’s still supported by the vendor. Old, unsupported software is one of the easiest ways for security issues to creep in, since it stops receiving fixes for newly found vulnerabilities. Updates are best handled through a managed process rather than left to individual users to sort out whenever they get around to it.
Network and connectivity
A decent, business-grade internet connection makes a big difference, especially with cloud tools, video calls, and file syncing all competing for bandwidth. Behind that, a properly configured router and firewall should sit between your network and the outside world, and Wi-Fi should be secured and kept separate from any guest access. If downtime would really hurt, it’s worth having a backup connection too.
Security
Every device should have reputable, centrally managed antivirus protection, along with an active firewall. Multi-factor authentication (MFA) should be switched on for email, remote access, and anything holding sensitive data. Give people access to what they need for their job and no more, and keep admin-level access limited to a small handful of accounts. A bit of regular security awareness training for staff goes a long way too, since most security incidents still come down to human error.
Backup and disaster recovery
Data should be backed up automatically on a regular schedule, with at least one copy kept offsite or in the cloud. Just as importantly, those backups should be tested now and then to make sure they’d actually work if you needed them. It’s also worth having a simple plan for how the business would get back up and running after a major outage, hardware failure, or cyber incident.
Servers and cloud infrastructure
If you’re running your own server, keep it within its supported lifecycle, under a maintenance agreement, and protected by a UPS in case of power cuts. Many businesses find it easier to move core infrastructure to the cloud instead, cutting down on hardware upkeep while gaining a bit more resilience. Either way, keep an eye on things so problems get caught early rather than after they’ve caused disruption.
Support and maintenance
Technology needs an ongoing home, whether that’s an internal IT team or an external provider, with a clear way to report and resolve issues. Patching, monitoring, and the odd check-up should just be part of how the business runs, not something that only happens once something’s gone wrong.
Keeping this platform current
Technology moves fast, so it’s worth revisiting this baseline at least once a year, or whenever something changes significantly in the business, to make sure it still holds up.
