BroraSys Home

Category

IT Infrastructure

18 articles

What the Search Box Already Knows: A SharePoint Permission Review Before Copilot

What the Search Box Already Knows: A SharePoint Permission Review Before Copilot

Microsoft 365 Copilot does not create new access; it makes existing access conversational. For UK SMEs, the practical risk is that inherited SharePoint and OneDrive permissions were never designed to be queried by an AI assistant, so board papers, HR records and client folders can surface to anyone whose prompt reaches them. This article sets out a structured pre-rollout permission audit that can be completed before licences are assigned.

The Empty Desk Still Has a Licence: A Quarterly Reconciliation of Named Software Seats

The Empty Desk Still Has a Licence: A Quarterly Reconciliation of Named Software Seats

Named-user software licences rarely fail loudly. They linger after role changes, team moves and departures, then reappear at renewal as seats nobody can justify. This article sets out a repeatable quarterly reconciliation for UK SMEs, using HR starter, mover and leaver data against vendor admin portals, with a clear method for separating named from concurrent seats and catching orphaned add-ons.

The Chiller Has a Login: A One-Day Plan to Separate Building Systems from the Corporate LAN

The Chiller Has a Login: A One-Day Plan to Separate Building Systems from the Corporate LAN

CCTV recorders, door controllers, heating and cooling plant, smart meters and leak sensors increasingly arrive with an IP address and a web login. This is a practical one-day method for UK SMEs to find those devices, establish who actually owns them, and move them onto a separated network segment before they become an unmanaged route into the business.

The Room Has No Memory: A Pre-Board Audit of Hybrid Meeting Technology

The Room Has No Memory: A Pre-Board Audit of Hybrid Meeting Technology

Hybrid meeting rooms are assembled over years, then expected to perform perfectly during a board session. This audit treats the room as a system: inventory every component, trace accounts and firmware, rehearse the awkward joins, and give the technology a named owner before the next high-stakes call.

The Door Left on the Latch: A Quarterly Reconciliation of Departing Staff Access

The Door Left on the Latch: A Quarterly Reconciliation of Departing Staff Access

Departing staff rarely leave a single account behind. They leave a trail of licences, forwarding rules, device records and third-party grants that no single system owns. This article sets out a repeatable quarterly reconciliation for UK SMEs, using HR, payroll and identity records as the control points.

Runtime Is a Claim: Testing What Your UPS Really Carries Before Winter

Runtime Is a Claim: Testing What Your UPS Really Carries Before Winter

A battery indicator can confirm that a UPS starts, but it cannot confirm how long the business will stay online. This article sets out a controlled one-hour winter drill for UK SMEs: measure runtime under representative load, validate graceful shutdown across servers, NAS, routers and PoE equipment, and record the result as operational evidence rather than assumption.

The Rule That Outlived Its Project: A Quarterly Review of Inbound Access

The Rule That Outlived Its Project: A Quarterly Review of Inbound Access

Firewall rules accumulate as projects end and temporary exceptions are forgotten. This article sets out a practical quarterly review for UK SMEs, covering how to trace inbound access to a named owner, test whether it is still required and record the decision for the next review.

The Front Door That Locked Itself: Testing Identity Fallbacks Before an SSO Outage

The Front Door That Locked Itself: Testing Identity Fallbacks Before an SSO Outage

Single sign-on is now the front door to email, finance and file storage for many UK SMEs, but the fallback route is often assumed rather than tested. This one-hour tabletop drill helps decision-makers rehearse break-glass access, line-of-business continuity, vendor updates and staff communications before an identity provider outage.

No One Gets a Pass: Bringing Senior Accounts Into the MFA Rule

No One Gets a Pass: Bringing Senior Accounts Into the MFA Rule

Many UK SMEs have a multi-factor authentication policy that quietly excludes the managing director. The exception is rarely written down, but everyone knows it exists. This practical guide explains how to close it using FIDO2 keys, conditional access, firmer helpdesk checks and a short exception register — without turning a security control into a boardroom status dispute.

The Account Nobody Can Open: A Renewal Drill for Domains, DNS and Certificates

The Account Nobody Can Open: A Renewal Drill for Domains, DNS and Certificates

A domain registration, a DNS zone and a TLS certificate are three of the cheapest items in the IT budget and three of the fastest ways to take a business offline. This drill walks a UK SME through locating every renewal, moving ownership into a shared administrative account, and rehearsing what happens when a registrar or DNS provider fails.

The Building Changes; the Dependencies Do Not: An IT Runbook for UK Office Moves

The Building Changes; the Dependencies Do Not: An IT Runbook for UK Office Moves

An office move exposes every hidden dependency in a small business network, from Openreach lead times and cabling surveys to VoIP numbers, door access and the printer nobody remembered. This is a countdown runbook with the tests to complete before removal day and the checklist that keeps staff working on the first morning.