Securing Microsoft Business Premium: A Practical Walkthrough
A 7-day sequence to actually use the Microsoft Business Premium security stack you're already paying for: Conditional Access, Defender, …
May 08, 2026
Read →
OSH INSIGHTS / FIELD NOTES
Notes from the operations desk.
Rants, write-ups, and the occasional opinion about M365, Google Workspace, DMARC, GravityZone, and the rest of the stack we manage day to day.
// All posts
Every insight, newest first
Security Audits: What Good Looks Like in 2026
What a proper SMB security audit covers in 2026: the 7-domain checklist (identity, endpoint, email-auth, data, MDM, backup, IR), and when to …
May 08, 2026
Read →
Setting Up Exclaimer on Microsoft 365: Step-by-Step
A step-by-step guide to setting up Exclaimer on Microsoft 365: connector, transport rule, DKIM, signature template and the bits that quietly …
May 08, 2026
Read →
Succession Planning for SMBs: How to Not Lose Your Business to Your IT Provider
How South African SMBs lose access to their own tech stack when an IT provider quits, sells or hikes prices, and the account-ownership map …
May 08, 2026
Read →
The Bouncer's Guide to DMARC: Securing Your Email Domain
DMARC is the bouncer for your email domain. A practical guide to SPF, DKIM, DMARC alignment, and the policy escalation from p=none to …
May 08, 2026
Read →
The Google Workspace Offboarding Master Checklist
A 25-minute Google Workspace offboarding checklist with real GAM commands. Hour-zero to day-30 actions to stop data loss, token leaks, and …
May 08, 2026
Read →
The IT Person Who Left 18 Months Ago Is Still Costing You Money
We took over a client's Linux fleet, ran a GravityZone trial, and found a backdoor on a file server left by the last IT person. The Samba …
May 08, 2026
Read →
The Small Business DMARC Bridge: From p=none to p=reject in Four Weeks
A pragmatic 4-week sprint plan for small businesses to take DMARC from p=none to p=reject. Real services, real timelines, real guardrails.
May 08, 2026
Read →
The Unlucky Teacher Problem: Inheriting IT You Didn't Ask For
You did not sign up to run the network. The previous person left. Now it is yours. A survival pattern for the accidental IT owner: first …
May 08, 2026
Read →
What Does p=reject Actually Mean (And When Should You Set It)?
p=reject is the strongest DMARC policy. Plain-English guide to what it instructs receivers to do, when to set it, and how to ramp safely …
May 08, 2026
Read →
Why Your IT Partner Should Be Offering You This (And What to Ask If They're Not)
Nine things a competent 2026 IT partner should be doing for you, and the questions to ask if your MSP isn't, without burning the …
May 08, 2026
Read →
You Knew This Vendor Would Hold Your Data Hostage. You Signed Anyway.
The vendor data hostage pattern is documented, predictable, and entirely preventable. Five contract clauses. Write them before you sign.
May 08, 2026
Read →
Not sure which service you need?
Book a 60-minute discovery call. We will map your existing stack, flag the highest-ROI gaps, and tell you which of the six pillars to start with, even if the answer is none of them yet.
