Why This Matters for Small Businesses
Unlike large companies, small businesses rarely have a dedicated IT department. That means problems go unnoticed until they become emergencies. A ransomware attack, a failed hard drive, or a network outage can cost thousands in lost productivity, and sometimes lost clients. Most of these risks are manageable with basic preparation.
Backups Checklist
Data loss is the most common and most damaging IT crisis small businesses face. These items should be checked at least monthly.
- ☐ Automatic backups are running daily: Verify backups are scheduled and completing. A backup that fails silently is no backup at all.
- ☐ Backups go to at least two locations: One local (external drive or NAS) and one cloud (Backblaze, OneDrive, Google Drive). See our backup guide for setup instructions.
- ☐ You've tested restoring a file recently: Backups you've never tested may not work. Restore a random file quarterly to confirm the backup is valid.
- ☐ Critical data is identified and included: Accounting files, client records, contracts, email archives. Know what matters and confirm it's being backed up.
- ☐ Backup media is stored off-site or in the cloud: A fire or theft that takes your computers can also take an on-site external drive. Cloud backup survives both.
Network and Wi-Fi Checklist
Your network is the foundation everything else runs on. Weak or unsecured networks expose your business to attacks and slow everyone down.
- ☐ Router firmware is up to date: Log into your router's admin panel and check for updates. Outdated firmware has known security vulnerabilities.
- ☐ Wi-Fi password is strong and not the default: Default passwords are publicly documented. Change it to something 12+ characters that isn't a word.
- ☐ Separate guest network for visitors: Visitors' devices shouldn't be on the same network as your business computers. Most routers support a guest network.
- ☐ WPA3 or WPA2 encryption is enabled: Check your router's wireless settings. WEP is insecure and should never be used.
- ☐ You know who has your Wi-Fi password: Former employees, contractors, or clients with access to your network represent a security risk. Change the password when access should end.
Security Checklist
Small businesses are increasingly targeted by cybercriminals precisely because they're less defended than large companies. These basics close the most common attack vectors.
- ☐ All computers have antivirus software running: Windows Defender (built-in) is sufficient for most businesses when kept updated.
- ☐ Two-factor authentication is on email accounts: Email is the master key to every other account. Enable 2FA immediately if you haven't.
- ☐ Employees use unique passwords for work accounts: Password reuse means one breach unlocks everything. A business password manager (1Password Teams, Bitwarden Business) solves this affordably.
- ☐ No sensitive data is stored in email attachments: Client financial records, contracts, or personal data sent as email attachments are a liability if that account is compromised.
- ☐ Phishing awareness among employees: Most breaches start with an employee clicking a malicious link. Brief your team on what phishing looks like and how to verify suspicious requests.
- ☐ Admin accounts are separate from daily-use accounts: Don't log into your computer with an administrator account every day. Use a standard account and elevate only when needed.
Hardware and Software Checklist
Neglected hardware and outdated software are two of the most common sources of business downtime.
- ☐ All computers are running supported operating systems: Windows 10 reaches end-of-life in October 2025. Windows 11 or macOS Sequoia ensures continued security patches.
- ☐ Pending Windows/macOS updates are installed: Set computers to update automatically, or review and approve updates monthly.
- ☐ Business-critical software is licensed and updated: Pirated software often contains malware. Unlicensed software may stop working unexpectedly.
- ☐ Hard drives are less than 5 years old: Mechanical hard drives fail after 3–5 years on average. Consider proactive SSD upgrades on aging computers.
- ☐ Computers have enough RAM for current workloads: 8 GB minimum for Windows; 16 GB if employees regularly have many applications open simultaneously.
- ☐ Printers and peripherals have updated drivers: Outdated printer drivers cause crashes and compatibility issues.
Account Access Checklist
Losing access to critical accounts, or having former employees retain access, creates both operational and security problems.
- ☐ You have the credentials for all business accounts: Email, domain registrar, web hosting, cloud services. Business owners should never be locked out of their own accounts.
- ☐ Former employee accounts are deactivated promptly: Remove access on the last day of employment, not weeks later.
- ☐ Account recovery options are up to date: Recovery email addresses and phone numbers should belong to the business, not individual employees who may leave.
- ☐ Software licenses are registered to the business: Not to an individual employee's personal email. When that person leaves, you should retain the license.
Continuity Checklist
What happens to your business if a computer fails, a key employee is out, or your office loses power? These questions should have answers before a crisis forces them.
- ☐ Someone else knows how to handle basic IT tasks: Restarting a router, finding the antivirus, or connecting to cloud storage shouldn't be a mystery to your entire team.
- ☐ Critical files are accessible remotely: Cloud storage (OneDrive, Google Drive, Dropbox) ensures employees can work from home if the office is unavailable.
- ☐ You have a local IT contact for emergencies: A documented support contact and escalation path reduces guesswork during a crisis.
- ☐ Surge protectors are on all computers and servers: Power surges cause hard drive failures and data loss. A UPS (uninterruptible power supply) also provides short-term backup power.
How Often to Run This Checklist
- Monthly: Verify backups are completing. Apply software updates. Check for any unusual account activity.
- Quarterly: Test backup restoration. Review who has network and account access. Check hardware health.
- Annually: Full IT review: hardware age, licensing, security posture, and whether your current setup still fits your business size.
If running this checklist reveals gaps you're not sure how to address, professional small business IT support is available for Nashville businesses. We can audit your current setup, fill in the gaps, and provide ongoing management so you don't have to think about it.