The 5-Minute IT Audit Every Small Business Owner Should Do Right Now

I've talked to hundreds of small business owners about their tech. The pattern is almost universal: they know something feels off about their IT setup, but they don't know where to start.

So I built this five-minute audit. No technical background required. Just honesty.

Question 1: Do you know every device that can access your business data?

Think about it for a moment. Your laptop, sure. But also: employee phones, the tablet at the front desk, the old computer in the back office, your accountant's laptop, the cloud backup service…

If you can't list them all, you have an asset inventory problem. You cannot protect what you cannot see.

Quick fix: Open a spreadsheet. List every device. Note who owns it, what it accesses, and when it was last updated.

Question 2: Is your Wi-Fi network segmented?

Most small businesses run a single Wi-Fi network. Customers, staff, the office printer, and business accounting software all on the same network. One compromised device touches everything.

Quick fix: Set up a guest network for visitors and IoT devices (smart TVs, printers, thermostats). Keep business data on a separate network.

Question 3: Do you have a backup you've actually tested?

"We back up to the cloud" is something I hear constantly. Then I ask: "Have you ever restored from that backup?"

Silence.

An untested backup is a hope, not a safety net. Ransomware attacks have destroyed businesses that thought they had backups, only to discover the backup service failed silently months ago.

Quick fix: Schedule a quarterly test restoration. Restore a few files from your backup and verify they're intact and current.

Question 4: Would you know if someone was accessing your accounts right now?

Most cloud services offer login audit logs — you just have to look. Google Workspace, Microsoft 365, QuickBooks, Salesforce — all of them log who logged in, when, and from where.

Quick fix: Spend 10 minutes this week reviewing login activity on your three most important business accounts. Look for unfamiliar locations or devices.

Question 5: What happens to system access when an employee leaves?

Offboarding is where small businesses leak access constantly. A former employee's account sitting active in your Google Workspace is an open door — especially if they left on bad terms.

Quick fix: Create an offboarding checklist. Every departure should trigger: disable accounts, revoke shared passwords, remove from email groups, recover business devices.

Scoring Yourself

The Uncomfortable Truth

Most small business owners score a 1 or 2. That's not a personal failure — it's a reflection of how hard it is to run a business while also being your own IT department.

The good news: the fixes above are cheap or free. They just require attention.

If you want help running a more thorough assessment — or building systems so you don't have to think about this stuff every day — PostMeld can help.

Questions? I'm always happy to talk IT with small business owners. Reach out through the contact page.