Most businesses don’t lose time and money because of “advanced hacking.” They lose it because of basic IT that’s underestimated, ignored, or left on autopilot.
It’s the laptop that never got updated.
The shared password that everyone knows.
The router that’s still running the default settings.
The backup that exists… but has never been tested.
Basic IT isn’t glamorous—but it’s the difference between a business that runs smoothly and one that gets derailed by downtime, data loss, or avoidable security issues.
If you’re a small business owner, or you’re the person who “accidentally became IT,” this guide will help you fix the fundamentals fast.
Why “basic IT” matters more than most people think
When the basics are solid, everything becomes easier:
- devices run faster and crash less
- teams waste less time troubleshooting
- security improves without expensive tools
- support costs go down
- you’re less vulnerable to ransomware and account takeovers
Basic IT is like electrical work in a van build: when it’s done right, you barely notice it. When it’s done wrong, you notice immediately.
The Basic IT Checklist Most Businesses Forget
Use this as a quick audit. You don’t need perfection—you need progress.
1) Asset inventory (know what you actually have)
If you can’t list your devices and accounts, you can’t secure them.
Minimum standard:
- list of laptops/desktops + who uses them
- list of phones/tablets (if used for work)
- list of key accounts: email, domain, hosting, banking integrations, SaaS tools
- admin access stored safely (not in someone’s memory)
Common problem: businesses lose access to their own systems when an employee leaves.
2) Updates and patching (the simplest “security upgrade”)
Outdated systems cause both security risk and performance issues.
Minimum standard:
- enable automatic OS updates
- keep browsers updated
- update critical apps (Office, Adobe, QuickBooks, etc.)
- update firmware on routers and business devices when needed
Overlooked detail: old router firmware is one of the most ignored attack surfaces in small business.
3) Passwords + MFA (this stops most account takeovers)
If you do only one thing from this post, do this.
Minimum standard:
- use a password manager
- require strong, unique passwords
- turn on MFA (multi-factor authentication) for email, banking, admin tools, and social accounts
Reality check: reused passwords + no MFA is how businesses get locked out of email and payments.
4) Backups that work (and have been tested)
Backups don’t count until you’ve tested recovery.
Minimum standard:
- follow a “3-2-1” approach (multiple copies, different media, one offsite)
- backup business-critical files automatically
- test restoring a file monthly
- protect backups from ransomware (separate access credentials)
Most common failure: “We have backups” → restore fails → panic.
5) Business email protection (email is your front door)
If your email is compromised, everything else can follow.
Minimum standard:
- MFA enabled
- remove old/unused accounts
- limit admin accounts
- review mailbox forwarding rules (attackers love this)
Bonus: separate “admin” accounts from everyday email logins.
6) Wi-Fi and router basics (small changes, big impact)
If your network is messy, everything is harder to support and secure.
Minimum standard:
- change default router credentials
- WPA2/WPA3 enabled
- separate guest Wi-Fi from business devices
- disable remote admin unless you truly need it
- document settings (or you’ll forget them)
7) Least privilege (stop giving everyone the keys)
If every device has admin access, malware gets admin access too.
Minimum standard:
- daily user accounts should not be local admin
- admin passwords should be separate and secured
- limit who can install software
8) Endpoint protection + basic monitoring
You don’t need enterprise tools to get real improvement.
Minimum standard:
- reputable antivirus/endpoint protection
- device encryption (BitLocker/FileVault)
- screen locks on laptops/phones
- a simple way to notice issues early (alerts, logs, or periodic check-ins)
9) Standard setup for new devices (so every system isn’t unique)
If every laptop is configured differently, troubleshooting becomes slower and more expensive.
Minimum standard:
- “new device checklist” (apps, updates, security settings, backups, password manager, MFA)
- consistent browser + extensions policy
- consistent file storage and sharing method
10) A simple incident plan (what to do when something goes wrong)
Most businesses lose hours because nobody knows the first step.
Minimum standard:
- who to call
- where passwords are stored
- how to disable accounts quickly
- how to restore from backup
- how to verify if money or data was affected
Even a one-page plan helps.
Quick self-audit (2 minutes)
If you answer “no” to two or more, this is where we can help quickly:
- Do all important accounts have MFA enabled?
- Are backups automatic and tested?
- Do you know who has admin access to what?
- Is your router configured securely (no default admin, guest network separated)?
- Are your devices consistently updated and encrypted?
- Could you recover quickly if someone’s email got compromised?
Where JackCraft Ventures can help (without overcomplicating it)
We help small businesses and individuals clean up the basics so your systems run better and your risk goes down.
Typical ways we help:
- IT “baseline” checkup (accounts, devices, updates, backups, network)
- MFA + password manager setup (done correctly)
- backup planning + restore testing
- device hardening + encryption setup
- network cleanup (guest segmentation, safer configs)
- practical security guidance (focused on real risk, not fear)
Note: Any security testing is done only with explicit written authorization and defined scope.
Final thought
“Basic IT” isn’t basic when your business depends on it. A few fundamental improvements can prevent weeks of downtime, lost files, and expensive cleanup.
If you want a clear plan—and not a pile of tech jargon—reach out. We’ll identify the highest-impact fixes first and build from there.
JackCraft Ventures LLC 