https://brorasys.co.uk/ Practical UK IT systems, plainly explained. en Sun, 15 Nov 2026 01:24:37 GMT https://brorasys.co.uk/search-box-already-knows-sharepoint-permission-review-copilot/ https://brorasys.co.uk/search-box-already-knows-sharepoint-permission-review-copilot/ Microsoft 365 Copilot does not create new access; it makes existing access conversational. For UK SMEs, the practical risk is that inherited SharePoint and OneDrive permissions were never designed to be queried by an AI assistant, so board papers, HR records and client folders can surface to anyone whose prompt reaches them. This article sets out a structured pre-rollout permission audit that can be completed before licences are assigned. BroraSys IT Infrastructure Sat, 14 Nov 2026 22:10:40 GMT https://brorasys.co.uk/domain-promise-auditing-spf-dkim-dmarc-before-enforcement/ https://brorasys.co.uk/domain-promise-auditing-spf-dkim-dmarc-before-enforcement/ Exact-domain spoofing turns your own address into an invoice fraud tool. This practical review explains how UK SMEs should inspect SPF, DKIM and DMARC records, identify legitimate senders, phase enforcement and prove that a spoofed message is actually refused. BroraSys IT Infrastructure Sat, 14 Nov 2026 15:15:48 GMT https://brorasys.co.uk/empty-desk-still-has-licence-quarterly-named-software-seat-audit/ https://brorasys.co.uk/empty-desk-still-has-licence-quarterly-named-software-seat-audit/ Named-user software licences rarely fail loudly. They linger after role changes, team moves and departures, then reappear at renewal as seats nobody can justify. This article sets out a repeatable quarterly reconciliation for UK SMEs, using HR starter, mover and leaver data against vendor admin portals, with a clear method for separating named from concurrent seats and catching orphaned add-ons. BroraSys IT Infrastructure Fri, 13 Nov 2026 23:54:09 GMT https://brorasys.co.uk/who-else-loads-when-basket-opens-third-party-script-audit/ https://brorasys.co.uk/who-else-loads-when-basket-opens-third-party-script-audit/ Analytics, chat, review and advertising tags accumulate on UK SME sites with little central oversight. This practical audit shows how to inventory every external script by owner and page, test consent at the checkout, and use CSP and integrity checks to reduce exposure before a privacy complaint or payment incident forces the issue. BroraSys Systems Integration Thu, 12 Nov 2026 20:19:41 GMT https://brorasys.co.uk/chiller-login-separate-building-systems-corporate-lan/ https://brorasys.co.uk/chiller-login-separate-building-systems-corporate-lan/ CCTV recorders, door controllers, heating and cooling plant, smart meters and leak sensors increasingly arrive with an IP address and a web login. This is a practical one-day method for UK SMEs to find those devices, establish who actually owns them, and move them onto a separated network segment before they become an unmanaged route into the business. BroraSys IT Infrastructure Thu, 12 Nov 2026 11:30:09 GMT https://brorasys.co.uk/controlled-deletion-proving-microsoft-365-retention/ https://brorasys.co.uk/controlled-deletion-proving-microsoft-365-retention/ Most UK SMEs can describe their retention policy; far fewer can demonstrate that the platform enforces it. This piece sets out a small, low-risk test using sample files and a test mailbox, and shows how to record the outcome in a form that would stand up to a subject access request or an ICO enquiry. BroraSys Tax & Compliance Systems Thu, 12 Nov 2026 06:25:19 GMT https://brorasys.co.uk/van-not-end-chain-auditing-retired-drives/ https://brorasys.co.uk/van-not-end-chain-auditing-retired-drives/ UK SMEs often treat collection as completion, but a retired laptop, phone or loose SSD still carries a record until someone proves otherwise. This one-afternoon audit ties every departing device to a wipe method, a signed certificate and a WEEE record. BroraSys IT Infrastructure Thu, 12 Nov 2026 01:34:39 GMT https://brorasys.co.uk/room-has-no-memory-hybrid-meeting-audit/ https://brorasys.co.uk/room-has-no-memory-hybrid-meeting-audit/ Hybrid meeting rooms are assembled over years, then expected to perform perfectly during a board session. This audit treats the room as a system: inventory every component, trace accounts and firmware, rehearse the awkward joins, and give the technology a named owner before the next high-stakes call. BroraSys IT Infrastructure Wed, 11 Nov 2026 21:00:02 GMT https://brorasys.co.uk/quarterly-reconciliation-departing-staff-access-uk-smes/ https://brorasys.co.uk/quarterly-reconciliation-departing-staff-access-uk-smes/ Departing staff rarely leave a single account behind. They leave a trail of licences, forwarding rules, device records and third-party grants that no single system owns. This article sets out a repeatable quarterly reconciliation for UK SMEs, using HR, payroll and identity records as the control points. BroraSys IT Infrastructure Wed, 11 Nov 2026 17:17:19 GMT https://brorasys.co.uk/runtime-is-a-claim-testing-ups-capacity-before-winter/ https://brorasys.co.uk/runtime-is-a-claim-testing-ups-capacity-before-winter/ A battery indicator can confirm that a UPS starts, but it cannot confirm how long the business will stay online. This article sets out a controlled one-hour winter drill for UK SMEs: measure runtime under representative load, validate graceful shutdown across servers, NAS, routers and PoE equipment, and record the result as operational evidence rather than assumption. BroraSys IT Infrastructure Wed, 11 Nov 2026 13:38:07 GMT https://brorasys.co.uk/paper-trails-in-silicon-practical-audit-networked-multifunction-devices/ https://brorasys.co.uk/paper-trails-in-silicon-practical-audit-networked-multifunction-devices/ Multifunction printers store credentials, address books and retained jobs long after the office has moved on. This half-day audit gives UK SMEs a defensible record of what those devices hold, who can reach them and how they are retired. BroraSys IT Infrastructure Tue, 10 Nov 2026 12:41:12 GMT https://brorasys.co.uk/rule-outlived-project-quarterly-inbound-access-review/ https://brorasys.co.uk/rule-outlived-project-quarterly-inbound-access-review/ Firewall rules accumulate as projects end and temporary exceptions are forgotten. This article sets out a practical quarterly review for UK SMEs, covering how to trace inbound access to a named owner, test whether it is still required and record the decision for the next review. BroraSys IT Infrastructure Tue, 10 Nov 2026 08:47:45 GMT https://brorasys.co.uk/front-door-locked-itself-testing-identity-fallbacks-sso-outage/ https://brorasys.co.uk/front-door-locked-itself-testing-identity-fallbacks-sso-outage/ Single sign-on is now the front door to email, finance and file storage for many UK SMEs, but the fallback route is often assumed rather than tested. This one-hour tabletop drill helps decision-makers rehearse break-glass access, line-of-business continuity, vendor updates and staff communications before an identity provider outage. BroraSys IT Infrastructure Mon, 09 Nov 2026 17:21:18 GMT https://brorasys.co.uk/green-ticks-not-evidence-backup-restore-drill-uk-smes/ https://brorasys.co.uk/green-ticks-not-evidence-backup-restore-drill-uk-smes/ A backup dashboard can confirm that software ran, not that your data can be recovered. This practical drill helps UK SMEs restore one real dataset, verify it properly and record the time it actually took. BroraSys IT Infrastructure Mon, 09 Nov 2026 13:24:55 GMT https://brorasys.co.uk/no-one-gets-a-pass-senior-accounts-mfa-rule/ https://brorasys.co.uk/no-one-gets-a-pass-senior-accounts-mfa-rule/ Many UK SMEs have a multi-factor authentication policy that quietly excludes the managing director. The exception is rarely written down, but everyone knows it exists. This practical guide explains how to close it using FIDO2 keys, conditional access, firmer helpdesk checks and a short exception register — without turning a security control into a boardroom status dispute. BroraSys IT Infrastructure Mon, 09 Nov 2026 09:02:30 GMT https://brorasys.co.uk/domain-dns-certificate-renewal-drill-uk-smes/ https://brorasys.co.uk/domain-dns-certificate-renewal-drill-uk-smes/ A domain registration, a DNS zone and a TLS certificate are three of the cheapest items in the IT budget and three of the fastest ways to take a business offline. This drill walks a UK SME through locating every renewal, moving ownership into a shared administrative account, and rehearsing what happens when a registrar or DNS provider fails. BroraSys IT Infrastructure Mon, 09 Nov 2026 01:20:49 GMT https://brorasys.co.uk/clipboard-not-filing-cabinet-generative-ai-retention-uk-smes/ https://brorasys.co.uk/clipboard-not-filing-cabinet-generative-ai-retention-uk-smes/ Most discussions about generative AI in a small business begin with the tool and end with the licence. The exposure sits in between, in the clipboard. This is a practical retention and deletion framework for prompts, outputs and the customer data that travels with them. BroraSys IT Infrastructure Sun, 08 Nov 2026 16:38:40 GMT https://brorasys.co.uk/two-signatures-one-phone-call-invoice-fraud-tabletop-drill/ https://brorasys.co.uk/two-signatures-one-phone-call-invoice-fraud-tabletop-drill/ A bank-detail change that looks entirely normal, followed by a director who needs it paid today. Both are survivable if the finance team has rehearsed them. Here is a 45-minute tabletop drill, with the injects, the timings and the runbook that comes out of the other side. BroraSys Tax & Compliance Systems Sun, 08 Nov 2026 16:38:40 GMT https://brorasys.co.uk/who-reads-info-shared-mailbox-audit-uk-sme/ https://brorasys.co.uk/who-reads-info-shared-mailbox-audit-uk-sme/ Every UK SME publishes an info@ or sales@ address and then quietly forgets how it works. This audit walks through aliases, permissions, forwarding rules and retention in plain English, and ends with a quarterly review that takes about an hour. BroraSys Systems Integration Sun, 08 Nov 2026 13:05:51 GMT https://brorasys.co.uk/office-move-it-runbook-uk-sme-countdown/ https://brorasys.co.uk/office-move-it-runbook-uk-sme-countdown/ An office move exposes every hidden dependency in a small business network, from Openreach lead times and cabling surveys to VoIP numbers, door access and the printer nobody remembered. This is a countdown runbook with the tests to complete before removal day and the checklist that keeps staff working on the first morning. BroraSys IT Infrastructure Sun, 08 Nov 2026 13:05:51 GMT https://brorasys.co.uk/register-nobody-owns-quarterly-housekeeping-shadow-saas-smes/ https://brorasys.co.uk/register-nobody-owns-quarterly-housekeeping-shadow-saas-smes/ Shadow SaaS usually begins with a useful free trial or a departmental purchase, not deliberate defiance. This article explains how UK SMEs can build a lightweight register, find likely tools through finance and identity data, and keep the list current with a 60-minute quarterly review. BroraSys Systems Integration Sun, 08 Nov 2026 09:05:56 GMT https://brorasys.co.uk/before-first-storm-rehearsing-broadband-failover-sme/ https://brorasys.co.uk/before-first-storm-rehearsing-broadband-failover-sme/ A backup router is not a contingency plan until staff have used it under mild pressure. This article sets out a 90-minute failover drill for UK SMEs, covering VoIP, cloud applications, card terminals, remote workers and customer communications, with simple pass/fail measures and a record to keep. BroraSys IT Infrastructure Sun, 08 Nov 2026 09:05:56 GMT https://brorasys.co.uk/hardware-audit-uk-smes-server-cupboard/ https://brorasys.co.uk/hardware-audit-uk-smes-server-cupboard/ The tower server under a desk, the NAS nobody owns and the UPS that has never been tested are still keeping many UK SMEs running. This practical BroraSys guide sets out a 2026 audit method, a one-page template and the questions to ask before renewing hardware support. BroraSys IT Infrastructure Sun, 08 Nov 2026 05:09:25 GMT https://brorasys.co.uk/exit-clause-five-software-terms-uk-smes-renewal/ https://brorasys.co.uk/exit-clause-five-software-terms-uk-smes-renewal/ Software lock-in is rarely a single dramatic trap; it accumulates through renewal notices, export formats and support terms. Drawing on the public lessons of the Horizon inquiry, this BroraSys opinion piece sets out five contract clauses that even a ten-person UK firm can demand before signing or renewing. BroraSys Systems Integration Sun, 08 Nov 2026 05:09:25 GMT https://brorasys.co.uk/voip-migration-analogue-line-audit-2026/ https://brorasys.co.uk/voip-migration-analogue-line-audit-2026/ Most UK phone migrations are scoped around handsets, while lift alarms, fire panels, card terminals and fax lines sit quietly on the same copper. This checklist sets out how to find those hidden lines, test the failure modes that matter, and avoid discovering the problem in the week before cutover. BroraSys Systems Integration Sun, 08 Nov 2026 01:08:44 GMT https://brorasys.co.uk/saas-data-residency-map-uk-sme/ https://brorasys.co.uk/saas-data-residency-map-uk-sme/ Customer records now move through a dozen subscription tools, each with its own hosting region, subcontractors and contract terms. A simple residency map, built in a spreadsheet and reviewed annually, gives decision-makers something more useful than reassurance: evidence. BroraSys Tax & Compliance Systems Sun, 08 Nov 2026 01:08:44 GMT https://brorasys.co.uk/mtd-income-tax-30k-threshold-systems-checklist-2026/ https://brorasys.co.uk/mtd-income-tax-30k-threshold-systems-checklist-2026/ Making Tax Digital for Income Tax is already live for larger sole traders and landlords. With the £30,000 threshold due in April 2027, smaller UK firms should test data flows, software and authorisations now. BroraSys Tax & Compliance Systems Sat, 07 Nov 2026 21:12:22 GMT https://brorasys.co.uk/integration-debt-audit-uk-smes/ https://brorasys.co.uk/integration-debt-audit-uk-smes/ Disconnected SaaS tools rarely fail loudly; they accumulate as manual rekeying, duplicate records and delayed reporting. This practical audit framework helps UK SMEs find integration debt before it becomes an operational cost. BroraSys Systems Integration Sat, 07 Nov 2026 21:12:22 GMT