Randtech I.T.

Category: Business IT

  • Common Microsoft 365 Migration Mistakes and How SA SMEs Can Avoid Them

    Common Microsoft 365 Migration Mistakes and How SA SMEs Can Avoid Them

    Introduction

    Migrating to Microsoft 365 offers South African small and medium-sized businesses better collaboration, modern security controls and reduced on-premise overheads. However, the migration process is where many organisations incur avoidable costs, downtime and frustration. This guide highlights the most common Microsoft 365 migration mistakes and gives practical steps SA SMEs can take to avoid them.

    Why migrations go wrong

    Many migration failures are not caused by the cloud itself but by weak planning, poor data hygiene and assumptions about user behaviour. For SMEs in Johannesburg and Gauteng, lost productivity can stall projects and affect clients. Understanding the main risk areas helps you prioritise effort and budget effectively.

    Top mistakes and how to avoid them

    1. Skipping a thorough discovery and inventory

    Mistake: Organisations begin migrations without a detailed inventory of mailboxes, shared files, applications and third-party integrations.

    How to avoid it:

    • Run an audit of mailboxes, file shares, SharePoint sites and active applications.
    • Identify legacy apps that may need reconfiguration or replacement.
    • Map data owners and usage patterns to prioritise what moves first.

    2. Underestimating data cleanup and quality

    Mistake: Migrating duplicate or obsolete data increases storage costs and prolongs migration time.

    How to avoid it:

    • Use deduplication tools and implement a retention policy before migrating.
    • Archive or delete old mailboxes and files where appropriate.
    • Communicate with teams about what should be retained versus archived.

    3. Neglecting security and compliance considerations

    Mistake: Treating migration as purely a technical move and overlooking governance, data sovereignty and access controls.

    How to avoid it:

    • Review Microsoft 365 compliance features (retention labels, eDiscovery, audit logs).
    • Ensure identity and access policies are defined, including MFA and conditional access.
    • Confirm where data will reside; if required, document controls for POPIA compliance.

    4. Failing to plan for identity and authentication

    Mistake: Identity misconfigurations cause login failures and lost access during cutover.

    How to avoid it:

    • Choose the right identity model: cloud-only, Azure AD Connect, or federation.
    • Test Azure AD Connect sync in a pilot environment and validate password flows.
    • Enable multi-factor authentication for administrators and critical users early.

    5. Inadequate testing and pilot migrations

    Mistake: Skipping small-scale pilots leads to surprises when the full migration runs.

    How to avoid it:

    • Run pilot migrations with representative users and high-volume mailboxes.
    • Test mail flow, calendar sharing, permissions and third-party integrations.
    • Document discovered issues and update the migration runbook accordingly.

    6. Poor communication and change management

    Mistake: Users are unprepared for new workflows, causing productivity loss and helpdesk overload.

    How to avoid it:

    • Create clear communications about timelines, expected downtime and end-user actions.
    • Provide quick-start guides and short training sessions focused on daily tasks.
    • Allocate local super-users who can assist colleagues on the day of cutover.

    7. Not planning for backups and rollback

    Mistake: Assuming Microsoft 365 replaces backups and not having a rollback strategy.

    How to avoid it:

    • Maintain backup solutions for critical mailboxes and SharePoint libraries during migration.
    • Define rollback criteria and checkpoints in the migration schedule.
    • Test restore procedures before decommissioning legacy systems.

    8. Under-resourcing the migration effort

    Mistake: Treating migration as a side project for busy IT staff, which causes delays and mistakes.

    How to avoid it:

    • Assign a dedicated migration project lead and skilled engineers for the cutover window.
    • Consider external migration specialists for complex scenarios to speed resolution.
    • Budget realistically for tools, training and possible consultancy support (include contingency).

    Practical checklist for South African SMEs

    1. Complete a discovery and data inventory.
    2. Cleanse and archive unnecessary data.
    3. Choose and test the identity model and enable MFA.
    4. Run pilot migrations and validate key workflows.
    5. Communicate plans, provide training and appoint super-users.
    6. Ensure backups and a rollback plan are in place.
    7. Schedule the migration with enough technical resource and contingency time.

    Local considerations for South African businesses

    SMEs in South Africa should consider connectivity and cost factors. Internet outages or limited bandwidth during migration windows can slow bulk transfers—work with your ISP to schedule increased throughput if required. Budgeting should factor in possible additional hours from experienced engineers rather than assuming internal learning time. Using local specialists who understand POPIA and regional compliance expectations reduces the risk of oversights.

    FAQ

    How long does a typical Microsoft 365 migration take for an SME?

    Times vary with data volume and complexity. A simple mailbox-only migration for a small team can take days, while full tenant migrations with SharePoint and apps may take weeks. Always plan pilots and build in contingency.

    Do I need to back up Microsoft 365 data?

    Yes. Microsoft provides platform resilience but not full long-term backup/restore for user-deleted items or specific business retention needs. Use a third-party backup solution during and after migration.

    Can we migrate outside business hours to avoid downtime?

    Yes. Staging work and cutovers outside peak hours reduces user disruption, but ensure support staff are available if issues arise during the scheduled window.

    Is Azure AD Connect required?

    Not always. Azure AD Connect is needed when you want to synchronise on-prem Active Directory identities with Azure AD. For cloud-only deployments, it isn’t required, but plan identity strategy based on your environment.

    How can we ensure POPIA compliance during migration?

    Document data flows, enable appropriate retention and access controls, restrict administrative access, and keep audit logs. Work with specialists who understand local compliance requirements.

    Conclusion

    Migrating to Microsoft 365 brings clear benefits but also common pitfalls that can be avoided with proper planning, testing and the right expertise. For South African SMEs, practical steps—discovery, data hygiene, secure identity, thorough testing and clear communication—will reduce risk and speed a successful move.

    Need help avoiding migration mistakes? RandTech IT specialises in practical, experienced Microsoft 365 migrations for South African SMEs. Contact us to plan a smooth, secure migration led by engineers who resolve issues quickly rather than learning on your time.

  • Common Microsoft 365 Migration Mistakes & How to Avoid Them

    Common Microsoft 365 Migration Mistakes & How to Avoid Them

    Introduction

    Migrating to Microsoft 365 can transform how your small or medium-sized business operates: better collaboration, cloud storage and modern security controls. But migrations that are rushed or poorly planned can cause downtime, data loss and frustrated users. This article outlines the most common Microsoft 365 migration mistakes South African SMBs make and provides clear, practical steps to avoid them.

    1. Skipping a formal migration plan

    One of the biggest mistakes is treating migration as a simple switch instead of a project. A migration plan defines scope, timeline, responsibilities and rollback steps.

    Why a plan matters

    • Prevents surprises and scope creep
    • Ensures stakeholders know their roles
    • Allows for realistic scheduling to avoid peak business hours

    Practical checklist items

    • Inventory of users, mailboxes, shared drives and applications
    • Risk assessment and contingency plan
    • Timeline with test, pilot and cutover phases
    • Communication plan for staff

    2. Underestimating data complexity and volume

    Estimate the amount and types of data to migrate. Many businesses assume emails and documents are straightforward, but hidden complexities can derail a move.

    Common data issues

    • Large PST files and archived mailboxes
    • File path length and unsupported characters for OneDrive/SharePoint
    • Legacy file permissions and shared drive structures

    How to mitigate

    • Run a discovery and reporting tool to map data size and structure
    • Clean up old or redundant files before migrating
    • Plan for permission mapping and restructure shares if necessary

    3. Neglecting identity and authentication

    Poor planning for identities leads to login failures, sync issues and security gaps. Decide early whether to use cloud-only Azure AD, hybrid identity or federation.

    Key considerations

    • Directory sync (Azure AD Connect) configuration and health checks
    • Password sync versus single sign-on (SSO) and conditional access
    • Impact on existing on-premises services like file servers or line-of-business apps

    Recommendations

    • Test Azure AD Connect in a pilot environment
    • Enable multi-factor authentication for all administrators and users
    • Document account mappings and any required federated setups

    4. Ignoring application compatibility and integrations

    Microsoft 365 will interact with many applications—ERP, payroll, invoicing and CRM systems. Overlooking integrations can break business-critical workflows.

    What to check

    • Third-party apps that rely on on-prem Exchange or LDAP
    • Line-of-business applications with hardcoded SMTP settings
    • Custom scripts and scheduled tasks that access local file paths

    How to prepare

    • Catalogue integrations and test each in a staging environment
    • Coordinate with vendors for supported configuration changes
    • Plan cutover windows for any services that require reconfiguration

    5. Insufficient user communication and training

    Technical success can still feel like failure if users don’t know how to use new tools. Poor communication leads to helpdesk overload and decreased productivity.

    Best practices

    • Provide simple, role-based guides for Outlook, Teams, OneDrive and SharePoint
    • Run training sessions for power users and departmental champions
    • Share a clear schedule for cutover and expected user impacts

    6. Failing to secure data and meet compliance

    Security missteps are costly. Ensure data protection, retention policies and compliance settings are configured before going live.

    Security settings to configure

    • Data Loss Prevention (DLP) rules for sensitive information
    • Retention policies and legal hold for regulated industries
    • Conditional Access to enforce device and location rules

    Local considerations

    South African SMBs should consider POPIA implications for personal data processing and ensure adequate controls and documentation are in place.

    7. Not testing and running a pilot

    Skipping pilots increases risk. A staged rollout identifies issues on a small scale and enables adjustments before full migration.

    Pilot structure

    1. Select a representative department or group
    2. Migrate mail and files for that group first
    3. Collect feedback and refine processes

    8. Overlooking backups and recovery plans

    Many assume Microsoft 365 negates the need for backups. Native retention is useful, but independent backups protect against accidental deletion, ransomware and configuration mistakes.

    Backup strategy essentials

    • Independent backups for Exchange, OneDrive, SharePoint and Teams
    • Defined Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO)
    • Regular restore tests documented and reviewed

    9. Poor change management and support model

    Without clear support, users will revert to old habits or leave gaps unreported. Define who handles first- and second-line support and how escalation occurs.

    Support recommendations

    • Provide a temporary elevated support level during and after cutover
    • Assign departmental champions as first contacts
    • Track incidents and lessons learned for future projects

    10. Budgeting mistakes and hidden costs

    Under-budgeting leads to corners being cut. Account for licensing, consultancy, migration tools, training and potential hardware upgrades.

    Typical cost items to include

    • Microsoft 365 licences and any add-on services
    • Migration tools or third-party consultants
    • User training time and temporary productivity loss

    Conclusion

    A successful Microsoft 365 migration for South African SMBs depends on planning, testing and experienced execution. Address identity, data, security, compatibility and user readiness up front to reduce risk and disruption. Taking the time to pilot, backup and document the migration pays off in faster adoption and fewer support incidents.

    Frequently Asked Questions

    1. How long does a typical Microsoft 365 migration take?

    Duration varies with size and complexity. For a small business with 10–50 users it may take days to a few weeks; larger or more complex environments can take several weeks to months. A discovery phase gives a reliable estimate.

    2. Will Microsoft 365 keep my data backed up?

    Microsoft provides retention and basic recovery, but it is not a substitute for independent backups. Third-party backup solutions offer point-in-time recovery and protection against accidental deletion or ransomware.

    3. Do we need to keep on-premises servers after migration?

    Not always. Some businesses keep directory controllers or file servers for legacy applications. A hybrid approach is common during transition; the long-term goal can be a full cloud migration if compatibility allows.

    4. What are common licensing pitfalls?

    Choosing the wrong licence tier for business needs can leave you without features such as DLP or advanced threat protection. Review required features and licence types during planning to avoid surprises.

    5. How do we prepare staff for the change?

    Communicate early, provide role-based training, run short how-to guides for core tasks and appoint power users as champions to help colleagues during and after cutover.

    6. Should we hire an external team for migration?

    Engaging experienced engineers reduces risk and accelerates resolution of unforeseen issues. For many SMBs, an expert partner is a cost-effective way to ensure a smooth migration.

    Ready to avoid these common Microsoft 365 migration mistakes? RandTech IT’s experienced engineers prioritise fast, practical resolution so your migration is smooth and minimally disruptive. Contact RandTech IT to discuss a tailored migration plan for your business.

  • Why Microsoft 365 Still Needs Independent Backup

    Why Microsoft 365 Still Needs Independent Backup

    Introduction

    Microsoft 365 is a critical productivity platform for thousands of South African small and medium-sized businesses. It delivers email, file storage, collaboration tools and compliance capabilities that help teams work from Johannesburg to the rest of the country. Yet despite its strengths, Microsoft 365 is not a substitute for a dedicated, independent backup solution. This article explains why independent backup remains essential and what local SMBs should consider when protecting their data.

    What Microsoft 365 does — and what it doesn’t

    Microsoft 365 offers built-in resilience, redundancy and high availability across its services. That protects against datacentre outages and gives businesses continuous access to email, SharePoint, OneDrive and Teams.

    Where Microsoft’s responsibility ends

    Microsoft’s service-level agreements cover platform availability. Microsoft maintains the infrastructure and ensures that services run. However, the company’s shared responsibility model places the onus for data protection, retention policies and recovery in part on the customer.

    Common gaps in Microsoft 365 data protection

    • Accidental deletion: Items removed by users or admins can be permanently lost if not backed up.
    • Retention policy limits: Default retention settings may not meet business, tax or regulatory requirements in South Africa.
    • Ransomware and malware: Infected files synced to cloud storage can propagate and overwrite user data.
    • Legal and compliance needs: eDiscovery and long-term retention may require immutable archives outside Microsoft’s native options.

    Real risks for South African SMBs

    Small and medium businesses in Gauteng and across South Africa face particular pressures: limited IT staff, tight budgets and rising cyber threats. These conditions make the risk of data loss more acute.

    Human error is the most common cause

    Employees and administrators make mistakes. A misapplied retention policy, a bulk delete in SharePoint or an accidental mailbox purge can quickly escalate. Without an independent backup, recovery can be slow or impossible.

    Ransomware and targeted attacks

    Ransomware groups increasingly target cloud accounts and synced endpoints. If attackers gain access to a Microsoft 365 account, they can encrypt or delete cloud files. Independent backups stored separately make recovery feasible without paying ransom.

    Benefits of independent Microsoft 365 backup

    Implementing an independent backup solution gives SMBs control, speed and peace of mind. Key benefits include:

    • Faster recovery: Restore specific mailboxes, files or versions quickly without relying on native recycle bins.
    • Longer retention: Keep data for the time required by your business or industry—beyond Microsoft’s default windows.
    • Protection against account compromise: Backups stored outside Microsoft 365 remain safe if accounts are breached.
    • Granular restore options: Recover individual items, folders or full sites to their original state.
    • Compliance support: Maintain immutable archives and retention policies to satisfy audits and legal holds.

    What to look for in an independent backup solution

    Not all backup products are equal. South African SMBs should evaluate solutions against practical criteria that reflect real-world needs.

    Essential features

    • Automated daily backups: Regular backups with flexible schedules to balance recovery point objectives (RPOs).
    • Point-in-time recovery: Ability to restore data to a specific date and time.
    • Encryption at rest and in transit: Secure data transfers and storage compliant with good practice.
    • Off-platform storage: Backups must be stored independently of the primary Microsoft 365 tenant.
    • Retention and immutability: Configurable retention periods and options for write-once, read-many (WORM) storage.
    • Local support and SLA: Access to responsive, knowledgeable support with clear recovery SLAs suited to SMB budgets.

    Considerations for South African businesses

    Choose a provider familiar with local business needs, such as support hours aligned to South African working times and pricing in rand when possible. Factor in internet connectivity: fast restores may require a hybrid approach where critical backups can be staged on-premises or via local bandwidth optimisation.

    How RandTech IT approaches Microsoft 365 backup

    RandTech IT balances pragmatic protection with cost control for small and medium businesses. We prioritise fast resolution by experienced engineers who minimise client downtime rather than learning on the job.

    Practical deployment steps

    1. Assess current Microsoft 365 configuration and identify data at risk: mailboxes, SharePoint sites, OneDrive accounts and Teams data.
    2. Define retention and recovery objectives with stakeholders, considering compliance and operational needs.
    3. Deploy a dedicated backup solution with off-platform storage and automated schedules.
    4. Test restores regularly and document recovery procedures so that your team can act quickly when needed.
    5. Train relevant staff and provide clear handover documentation—so incidents are resolved efficiently by experienced engineers.

    Costs and ROI for SMBs

    Backup solutions have a clear cost, but losing critical email, customer records or financial documents can be far more expensive. For many SMBs the decision is pragmatic: pay a predictable monthly fee for backup services and reduce the risk of major disruption. Consider phased deployments—protect the most critical data first to manage costs.

    Frequently asked questions

    1. Doesn’t Microsoft keep deleted items in the recycle bin?

    Yes, Microsoft 365 has recycle bins and retention features, but these have limits and can be misconfigured or bypassed. Independent backup offers point-in-time recovery and longer retention control.

    2. How quickly can we recover from a ransomware attack?

    Recovery speed depends on your backup configuration and bandwidth. With a good solution and tested procedures, individual mailboxes or files can often be restored within hours; full tenant restores take longer. RandTech IT focuses on fast, prioritised recovery to reduce business impact.

    3. Do backups increase our Microsoft 365 costs?

    Backups are typically a separate cost from Microsoft licensing. They won’t increase your Microsoft subscription fees but will add a service cost that should be compared to potential data-loss consequences.

    4. Can we keep backups in South Africa?

    Yes. Some backup providers offer local or regional storage options. Storing backups within South Africa can help with compliance and reduce restore latency. RandTech IT can advise on suitable storage choices for your needs.

    5. How often should we test backups?

    Test restores at least quarterly, and after any major change to your environment. Regular testing ensures recovery procedures work and staff know what to do during an incident.

    Conclusion

    Microsoft 365 provides excellent service availability, but it is not a complete backup or archive solution for business data. South African SMBs should adopt an independent backup strategy to protect against human error, retention gaps, ransomware and compliance risks. Practical, tested backups delivered by experienced engineers ensure faster recovery with minimal disruption.

    Contact RandTech IT — If you want practical, experienced assistance designing and managing Microsoft 365 backups, contact RandTech IT. Our engineers prioritise fast resolution so your business can get back to work quickly.

  • How to Secure Microsoft 365 Against Account Takeover

    How to Secure Microsoft 365 Against Account Takeover

    Introduction

    Account takeover of Microsoft 365 can interrupt business, expose sensitive data and lead to costly recovery. South African small and medium-sized businesses (SMBs) face targeted attacks because they hold valuable data but often lack hardened controls. This guide explains practical, prioritised steps you can take today to secure Microsoft 365 against account takeover, tailored to the realities of SMBs in Gauteng and across South Africa.

    Understand the risk and common attack methods

    Attackers use several routes to take over M365 accounts. Knowing these helps you focus defences.

    Phishing and credential harvesting

    Fraudulent emails and fake login pages remain the most common method for stealing credentials. Compromised credentials let attackers bypass perimeter defences quickly.

    Brute force and credential stuffing

    Reused or weak passwords are vulnerable to automated attacks that try large password lists or use leaked credentials from other breaches.

    Legacy protocols and insecure clients

    Older protocols (IMAP, POP) and unpatched email clients can bypass modern authentication and allow direct access.

    Priority controls to prevent account takeover

    Implement the following controls in order of impact. These are cost-effective and feasible for SMBs, including those in Johannesburg and wider Gauteng.

    1. Enforce Multi-Factor Authentication (MFA)

    MFA is the single most effective control to stop account takeover. Require it for all users including administrators. Use app-based authenticators or hardware FIDO2 keys where possible.

    2. Enable Conditional Access

    Azure AD Conditional Access lets you require MFA or block access from risky locations and unmanaged devices. Start with policies that require MFA for:

    • All admin roles
    • Access from outside South Africa if not business-critical
    • Unmanaged or non-compliant devices

    3. Block legacy authentication

    Disallow legacy protocols such as IMAP, POP and SMTP AUTH where possible. These do not support modern authentication and are a frequent attack vector.

    4. Use strong password policies and passphrases

    Encourage long passphrases and ban password reuse. Consider Azure AD Password Protection to block commonly used passwords and leaked credentials.

    5. Harden admin accounts

    Limit the number of global admins. Use dedicated breakout accounts for elevated tasks and protect them with MFA and FIDO2 keys.

    Device and endpoint controls

    Compromised endpoints are often the start of account takeover. Reduce this risk with device management and secure configurations.

    Microsoft Defender and endpoint management

    Deploy Microsoft Defender for Business or equivalent endpoint protection. Use Intune or another Mobile Device Management (MDM) solution to enforce patching, encryption and device compliance.

    Restrict access from unmanaged devices

    Conditional Access can block or limit access for unmanaged endpoints. Require device compliance for access to sensitive apps and data.

    Monitor, detect and respond

    Prevention is essential, but rapid detection and response reduce damage when incidents occur.

    Enable unified auditing and alerts

    Turn on Microsoft 365 audit logs and alerting for suspicious activities like impossible travel, mass mailbox rule creation, forwarding rules and sign-ins from unusual locations.

    Use activity monitoring and analytics

    Azure AD Identity Protection and Microsoft Defender for Office 365 provide risk scores and automated actions for risky sign-ins. Review reports regularly and tune alerts to reduce false positives.

    Establish an incident response plan

    Have a documented, tested plan for account compromise. Typical steps include isolating affected accounts, resetting credentials and reviewing mailbox rules and forwarding. Assign responsibilities and escalation paths.

    Email hygiene and data protection

    Protect against email-based attacks

    Enable anti-phishing, anti-spam and safe links/safe attachments in Defender for Office 365. Configure DMARC, DKIM and SPF for your domains to reduce successful spoofing.

    Limit external forwarding and mailbox delegation

    Prevent automatic forwarding to external addresses unless business-critical. Regularly review mailbox delegation and shared mailbox permissions.

    Operational practices for SMBs

    Practical day-to-day practices help keep your Microsoft 365 environment secure without large overhead.

    • Conduct regular user awareness training focused on phishing and social engineering.
    • Onboard and offboard users with a documented process that includes revoking access and removing licences.
    • Review licence assignments and remove unnecessary admin privileges.
    • Schedule quarterly security reviews and post-incident lessons learned.

    Cost considerations for South African SMBs

    Many security features are included in Microsoft 365 Business Premium or can be added affordably. Compare licence tiers against the cost of recovery from a compromise, which may include productivity loss, data recovery and reputational damage. RandTech IT can help choose the right mix to fit your budget in Rands and operational needs.

    FAQ

    How quickly should I enable MFA?

    Enable MFA immediately. Start with administrators and users with access to sensitive data, then roll out to all staff. This is a high-impact control you can implement in days.

    Will blocking legacy authentication break email for staff?

    It can affect older email clients. Survey your users, move clients to modern authentication-capable software, and use Conditional Access to phase the change.

    Do SMBs need Microsoft Defender for Office 365?

    It’s highly recommended if your business relies on email. It adds targeted anti-phishing, link protection and automated investigation features that reduce risk and workload.

    How do we handle a suspected account compromise?

    Immediately disable the account, reset passwords and revoke active sessions and tokens. Review mailbox rules, forwarding and recent activity. Engage your IT support or a managed service provider for containment and recovery.

    Can RandTech IT manage these settings for us?

    Yes. RandTech IT offers managed Microsoft 365 security and practical implementation services to ensure controls are correctly configured and maintained.

    Conclusion

    Securing Microsoft 365 against account takeover is achievable for South African SMBs with focused, practical actions: enforce MFA, use Conditional Access, block legacy authentication, protect endpoints and monitor activity. These steps reduce risk quickly and cost-effectively.

    If you need practical, experienced assistance to implement or review Microsoft 365 security, contact RandTech IT. Our engineers work rapidly to protect your business so you can get back to running it.

  • Microsoft 365 vs Google Workspace for South African SMEs

    Microsoft 365 vs Google Workspace for South African SMEs

    Introduction

    Choosing between Microsoft 365 and Google Workspace is a common crossroads for South African small and medium-sized businesses. Both suites offer email, document editing, storage and collaboration, but the right choice depends on practical needs: cost, security, local support and how your team works every day. This guide breaks down the key differences and considerations for SMEs in South Africa so you can decide with confidence.

    Overview: What each suite provides

    Microsoft 365

    Microsoft 365 centres on familiar desktop apps (Word, Excel, PowerPoint) alongside cloud services: Exchange Online for email, OneDrive and SharePoint for storage and Teams for chat and meetings. It suits organisations that rely on robust offline editing, complex spreadsheets, and deep integration with Windows environments.

    Google Workspace

    Google Workspace focuses on browser-first apps — Gmail, Docs, Sheets, Slides — with Drive for storage and Meet for video calls. Its strengths are real-time collaboration, simplicity and fast onboarding, particularly for teams working primarily online or on Chromebooks.

    Cost and licensing considerations for South African SMEs

    Pricing is an important factor, and South African buyers should consider both monthly fees and indirect costs like migration and support. Both vendors offer tiered plans; compare features rather than just headline price.

    • Direct subscription costs: Compare the included storage, desktop apps (Microsoft) and admin controls.
    • Migration and setup: Budget for migrating mailboxes, shared drives and permissions — often the bulk of practical cost.
    • Support: Local, responsive support from an IT partner reduces downtime — an important cost for SMEs in Johannesburg and Gauteng where business hours matter.

    Productivity and collaboration

    Real-time collaboration

    Google Workspace is known for smooth, simultaneous editing in the browser. Microsoft has closed much of the gap with co-authoring in Office for the web and synced desktop apps, but workflows that rely on complex Office features may still favour Microsoft.

    Communication tools

    Microsoft Teams integrates chat, meetings, telephony and app integrations tightly into Microsoft 365. Google Meet provides straightforward video and ties closely to Calendar and Gmail. Choose Teams if you need a hub for integrated workflows and telephony; choose Meet for simpler video-first use cases.

    Storage, file management and backup

    Storage models differ: Microsoft uses OneDrive for personal storage and SharePoint for team files, which supports detailed permissions and document management. Google Drive stores files in a single namespace with shared drives for teams.

    • Backup and retention: Neither suite is a backup solution by default. SMEs should plan third-party backups for ransomware protection and long-term retention.
    • Offline access: Microsoft’s desktop apps provide the strongest offline editing experience; Google offers offline modes but they are more limited.

    Security and compliance

    Both platforms offer enterprise-grade security features: multi-factor authentication (MFA), mobile device management (MDM), data loss prevention (DLP) and audit logs. The practical difference for SMEs often comes down to the availability of policy templates, ease of administration and how an IT partner implements controls.

    Local compliance and data residency

    Neither Microsoft 365 nor Google Workspace stores all customer data exclusively in South African data centres for all services. SMEs should assess data residency needs, especially where industry regulations apply, and ask vendors or partners how data flows are handled.

    Integration with other business systems

    Consider the ecosystem your business uses. Microsoft 365 integrates deeply with Windows Server, Active Directory and popular ERP/accounting systems used locally. Google Workspace often integrates well with modern, cloud-native applications and may reduce complexity for browser-centric workflows.

    • Accounting and payroll: Check compatibility with your South African accounting systems — some connectors are vendor-specific.
    • Custom apps: If you rely on bespoke software or integrations developed by your web or software vendor, discuss API and single sign-on requirements.

    Administration and IT support

    Administration experience differs: Microsoft’s admin centre is feature-rich and can be complex; Google’s console is streamlined and easier for non-specialists. For SMEs, the deciding factor is often whether you have access to experienced engineers who can manage policies, migrations and incidents quickly.

    Why local managed services matter

    Fast, experienced support reduces downtime. RandTech IT prioritises resolution by experienced engineers rather than trial-and-error learning on the client’s time — a practical benefit that matters when email and collaboration tools are business-critical in Johannesburg’s fast-paced market.

    Migrations and change management

    Migrating from one platform to another involves mailbox transfers, shared drive restructuring, and user training. Common pitfalls include lost permissions, broken links in documents and user resistance.

    • Plan migrations outside peak business periods.
    • Run pilots with representative users before full cutover.
    • Provide short, role-specific training rather than lengthy generic sessions.

    Choosing based on business profile

    Match the platform to how your business works:

    • Choose Microsoft 365 if: Your team relies on advanced Office features, needs strong offline capabilities, or you have Windows Server/AD dependencies.
    • Choose Google Workspace if: You prefer simple administration, fast real-time collaboration in the browser, and mostly cloud-native workflows.
    • Consider hybrid approaches: Many SMEs use a mix — for example, Microsoft for advanced desktop users and Google for flexible collaboration teams — supported by single sign-on and managed identity services.

    FAQ

    Will my email remain working during migration?

    Yes—if the migration is planned and executed by experienced engineers. RandTech IT uses phased mailbox migration and DNS cutover planning to minimise downtime.

    Which platform is better for security against ransomware?

    Both offer security controls, but protection depends on configuration, patching and backups. Implement MFA, endpoint protection and third-party backups regardless of platform.

    Can we switch later if we pick the wrong suite?

    Yes, migrations are possible but not trivial. Plan for data export, permission mapping and user retraining. Factoring migration costs into your decision helps avoid surprises.

    How much training will my staff need?

    Training requirements depend on current habits. Most users adapt quickly to basic email and documents; attention is usually required for collaboration practices and shared drive management.

    Do we need local servers if we move to the cloud?

    Not usually. Many SMEs can operate fully in the cloud. However, businesses with legacy applications or specific regulatory needs might retain local servers and integrate them with cloud services.

    Conclusion

    Microsoft 365 and Google Workspace are both strong choices for South African SMEs. The right decision depends on day-to-day work patterns, the need for advanced Office functionality, administration preferences and the availability of experienced local support. Prioritise an assessment of workflows, migration costs and security posture rather than selecting on brand alone.

    If you’d like practical, experienced guidance and a clear migration plan, contact RandTech IT. Our engineers focus on fast, effective resolutions so your business stays productive during change.

  • SharePoint vs OneDrive: Where Should Company Files Be Stored?

    SharePoint vs OneDrive: Where Should Company Files Be Stored?

    Introduction

    Choosing where to store company files is a frequent question for South African small and medium-sized businesses. With Microsoft 365 widely used across Gauteng and beyond, teams often debate SharePoint vs OneDrive. Both are Microsoft cloud solutions, but they serve different business needs. This article explains the differences and gives clear recommendations so you can make the right choice for collaboration, security and future growth.

    What OneDrive and SharePoint Are

    OneDrive for Business — personal cloud storage with sharing

    OneDrive for Business is a user-centric storage location linked to an individual’s Microsoft 365 account. Think of it as each employee’s personal business folder in the cloud. It’s ideal for draft documents, private files and working copies before you share or publish them.

    SharePoint — team-based document management

    SharePoint Sites (and Document Libraries) are designed for team collaboration, departmental content and company-wide information. SharePoint provides structure, version control, metadata, and workflows that support organised, long-term storage and regulated access.

    Key Differences That Matter to SMEs

    Purpose and ownership

    • OneDrive: Owned by the user. Best for individual work in progress.
    • SharePoint: Owned by the organisation or team. Best for shared business records and processes.

    Collaboration and co-authoring

    Both platforms support real-time co-authoring of Office files. However, SharePoint is superior where multiple people need consistent access to a canonical copy, structured folders, or document sets tied to projects and compliance requirements.

    Permissions and governance

    OneDrive permissions are simple and user-controlled, which can lead to inconsistent sharing if left unmanaged. SharePoint supports granular permissions, site-level governance, retention labels and auditing — features many SMEs need as they scale or face regulatory requirements.

    Searchability and metadata

    SharePoint’s ability to use metadata, views and search across sites makes it easier to find documents across projects. OneDrive lacks these built-in taxonomies, so it’s not ideal as the primary store for company knowledge.

    Backup, retention and compliance

    Both are part of Microsoft’s cloud ecosystem, but SharePoint integrates more naturally with retention policies, legal holds and eDiscovery features required for formal records management and audits.

    When to Use OneDrive

    • Personal drafts and private working documents that aren’t ready for wider sharing.
    • Temporary files for ad hoc tasks or files tied to a single employee.
    • Situations where quick, limited sharing is required and strict governance isn’t necessary.

    When to Use SharePoint

    • Team collaboration on ongoing projects and departmental document libraries.
    • Official company records, policies, and procedural documents that must be centrally managed.
    • Processes that require approval flows, metadata, versioning and discoverability.
    • Any files tied to compliance, audit trails or retention policies.

    Common SME Use Cases and Recommendations

    Small marketing team in Johannesburg

    Store campaign assets, shared templates and final deliverables in a SharePoint site. Team members use OneDrive for draft ads and initial concept documents until they’re ready to publish to SharePoint.

    Finance and compliance

    Finance documents, contracts and tax records should live in SharePoint with strict permissions and retention rules. OneDrive is not appropriate for official records that must be retained or audited.

    Remote or hybrid teams

    Use SharePoint for shared resources like onboarding packs, SOPs and central templates. OneDrive remains useful for personal notes and files employees take with them between locations.

    Practical Governance Steps for SMEs

    • Define clear policies: what goes to SharePoint vs OneDrive.
    • Create team sites and libraries aligned with business functions (Sales, HR, Finance).
    • Apply retention and access policies to SharePoint libraries for compliance.
    • Train staff on sharing practices and how to use Teams integrations (Teams uses SharePoint for file storage).
    • Use lifecycle rules to archive or delete obsolete content and reduce clutter.

    Costs and Licensing Considerations in South Africa

    Microsoft 365 plans commonly used by SMEs already include both OneDrive and SharePoint. When estimating costs, factor in storage growth, additional backup tools if required, and any professional services to configure governance. For budgeting purposes, consider the cost of time lost to poor organisation — moving files, chasing versions and rebuilding lost records can be greater than modest management or migration fees.

    Tools and Integrations

    SharePoint integrates with Microsoft Teams, Power Automate and Power Apps to automate approvals and create simple business apps. OneDrive integrates seamlessly with Office apps for quick syncing. For SMEs in Gauteng, RandTech IT can help design SharePoint structures and automate common tasks so your team works faster without unnecessary complexity.

    Migration Tips

    1. Audit current file locations and duplication across OneDrive and shared drives.
    2. Classify documents: keep, archive, delete or move to SharePoint.
    3. Plan site architecture around functions rather than individuals.
    4. Communicate changes clearly and provide short how-to guides for staff.
    5. Test with a pilot team before full rollout to ensure permissions and workflows behave as expected.

    FAQ

    Can files in OneDrive be moved to SharePoint?

    Yes. You can move or copy files from OneDrive to SharePoint. Use the OneDrive or SharePoint web interface or migration tools for bulk moves and preserve version history when possible.

    What if an employee leaves the company?

    Files stored in OneDrive tied to the user account can be transferred to another account or moved to SharePoint before deprovisioning. SharePoint ensures company-owned files remain accessible regardless of personnel changes.

    Do SharePoint and OneDrive work offline?

    Yes. Both support syncing to local devices with the OneDrive sync client. SharePoint document libraries can be synced and accessed offline; changes will sync back when online.

    Is extra backup necessary if we use SharePoint/OneDrive?

    Microsoft protects against infrastructure failure, but accidental deletion, ransomware and retention gaps are reasons many SMEs choose third-party backups. Consider a backup strategy aligned with your recovery objectives.

    How do we prevent uncontrolled sharing from OneDrive?

    Implement sharing policies, limit external sharing by default, and provide user training. Conditional access and Data Loss Prevention (DLP) policies help control sensitive data exposure.

    Conclusion

    SharePoint and OneDrive are complementary. OneDrive works best for individual work-in-progress, while SharePoint should be the authoritative store for team collaboration, company records and compliance. For South African SMEs, the right balance reduces risk, improves productivity and keeps files discoverable as your business grows.

    Need practical help? RandTech IT specialises in configuring Microsoft 365 for South African SMEs. If you want the file structure, governance and migration managed by experienced engineers — not trial-and-error — get in touch and we’ll help implement a solution that fits your business needs.

  • How to Secure Microsoft 365 Against Account Takeover

    Introduction

    Microsoft 365 is the backbone of many South African small and medium-sized businesses (SMEs). Its email, Teams and Office apps keep teams productive, but they also present a prime target for account takeover attacks. For businesses in Gauteng and across South Africa, a compromised M365 account can mean lost invoices, exposed client data and costly downtime.

    This article provides a clear, practical roadmap on how to secure Microsoft 365 against account takeover. It focuses on measures that deliver immediate protection and are realistic for SMEs, highlighting where experienced support speeds implementation and reduces risk.

    Understand the risk: how account takeover happens

    Account takeover (ATO) generally follows a predictable pattern. Attackers use stolen credentials, phishing, credential stuffing or exploitation of weak authentication to gain access. Once inside, they can forward emails, reset passwords at other services, and use the account to launch further attacks.

    SMEs are particularly vulnerable because they often lack hardened identity controls and rapid incident response.

    Core protections every SME should deploy

    1. Enable and enforce multi-factor authentication (MFA)

    MFA is the single most effective control against ATO. Require MFA for all accounts, not just administrators. Prefer authenticator apps or security keys over SMS, which can be vulnerable to SIM swap attacks.

    • Use Microsoft Authenticator or hardware FIDO2 keys for high-risk users.
    • Apply MFA via Conditional Access (see below) for gradual rollout and exceptions.

    2. Use Conditional Access policies

    Conditional Access lets you enforce rules based on user, device, location and risk. For an SME, useful policies include:

    • Require MFA for all access from outside South Africa or untrusted networks.
    • Block legacy authentication protocols (IMAP, POP) that don’t support modern auth.
    • Require compliant or hybrid-joined devices for sensitive resources.

    3. Block legacy authentication and modernise protocols

    Legacy authentication is commonly exploited in automated credential stuffing. Disable basic auth where possible and migrate mail clients to use modern authentication (OAuth).

    4. Configure secure password policies and identity protection

    Strong password policies matter, but they’re less effective without MFA. Use Azure AD Password Protection to block common and compromised passwords, and enable Microsoft Defender for Identity or Azure AD Identity Protection to detect risky sign-ins.

    Hardening mail and collaboration to prevent abuse

    1. Protect email flow and prevent forwarding

    Compromised mailboxes are often used to defraud suppliers or clients. Configure these controls:

    • Disable automatic mailbox forwarding to external addresses unless explicitly required.
    • Enable mailbox auditing and alerting for unusual forwarding rules.
    • Use Exchange Online Protection and anti-phishing policies to flag impersonation attempts.

    2. Configure DKIM, DMARC and SPF properly

    Set up SPF, DKIM and DMARC for your business domains to reduce email spoofing and improve deliverability. A DMARC policy set to quarantine or reject reduces successful phishing impersonations of your domain.

    3. Restrict third-party app permissions

    OAuth consent grants can give malicious apps long-lived access. Regularly review and restrict app permissions; require admin approval for high-risk apps.

    Monitoring, detection and rapid response

    1. Enable logging and alerts

    Turn on sign-in and audit logs in Azure AD and Exchange Online. Create alerts for anomalous activity such as:

    • Impossible travel or sign-ins from unexpected countries.
    • Mass mailbox rule creation or deletions.
    • Multiple failed sign-ins followed by success.

    2. Use Defender and SIEM for richer detection

    Microsoft Defender for Office 365 and Defender for Identity provide threat analytics. Feeding logs into a SIEM or Microsoft Sentinel (even a scaled deployment for SMEs) helps correlate events and speed response.

    3. Have an incident response plan

    Predefine steps for suspected ATO: isolate affected accounts, reset credentials, force reauthentication, review activity, notify impacted parties and, if needed, involve specialist incident responders. Practised playbooks reduce downtime and risk.

    Operational practices that reduce exposure

    1. Least privilege and role separation

    Assign admin roles sparingly. Use Privileged Identity Management (PIM) for just-in-time elevation so high privileges are rarely active. Limit global admin accounts and require MFA for them.

    2. Regular user training and simulated phishing

    Human error is a frequent cause of account takeover. Deliver targeted training and simulated phishing campaigns to help staff recognise social engineering. Focus on finance, HR and staff who handle external communications.

    3. Keep devices and endpoints patched

    Compromised endpoints can bypass identity controls. Ensure Windows updates and security patches are applied, use endpoint protection and enforce disk encryption on laptops used outside the office.

    Practical rollout steps for SMEs in South Africa

    1. Audit: catalogue M365 users, admin accounts and third-party app permissions.
    2. Immediate: enable MFA for all users and block legacy authentication.
    3. Short term (2–6 weeks): implement Conditional Access, configure DKIM/SPF/DMARC, enable logging and basic alerting.
    4. Medium term (1–3 months): deploy Defender features, set up PIM, run staff training and simulated phishing.
    5. Ongoing: review alerts, perform quarterly access reviews and practice incident response playbooks.

    These steps are practical for SMEs and can be staged to match resource availability. For many businesses, partnering with experienced engineers ensures fast, low-disruption execution.

    Cost considerations for South African SMEs

    Microsoft 365 licensing affects which features are available. MFA and basic security controls are included in most plans, while Defender, PIM and advanced Conditional Access features may require higher-tier licences. Factor in:

    • Licence upgrades where necessary.
    • Costs for security keys (FIDO2) or additional endpoint protection.
    • Managed service or consultant fees for setup and monitoring.

    Budgeting in advance avoids unexpected costs and ensures the right level of protection for the business. For many SMEs the cost of managed security is small compared with the potential expense of a breach.

    Frequently asked questions

    Can MFA be bypassed?

    MFA significantly reduces risk but is not infallible. Attackers can use sophisticated phishing or session capture. Pair MFA with Conditional Access, device compliance checks and monitoring to strengthen protection.

    How quickly should we act after a suspected takeover?

    Immediate containment is critical: disable or block the account, force password reset and revoke active sessions. Then conduct a focused investigation and follow incident response steps.

    Is it hard to disable legacy authentication?

    It can affect older mail clients and devices. Test changes with a small user group first and provide guidance for migrating to modern authentication. Blocking legacy auth is essential for security.

    Do we need a SIEM for an SME?

    A full SIEM is not mandatory, but centralised logging and alerting are important. Consider managed SIEM or Microsoft Sentinel in a scaled deployment if you need advanced correlation and 24/7 monitoring.

    How often should we review admin accounts and app permissions?

    Conduct reviews at least quarterly. Remove unused admin accounts and revoke unnecessary app permissions to reduce attack surface.

    Conclusion

    Securing Microsoft 365 against account takeover is achievable for South African SMEs with practical controls: enforce MFA, use Conditional Access, block legacy authentication, harden email, monitor activity and prepare an incident response plan. These measures reduce risk quickly and can be implemented in stages that suit your business.

    RandTech IT specialises in helping SMEs deploy these protections with minimal disruption. If you want experienced engineers who prioritise fast resolution over learning on the job, contact RandTech IT for practical assistance securing your Microsoft 365 environment.

    Contact RandTech IT — reach out for a security review, MFA rollout, Conditional Access setup or incident response support tailored to South African SMEs.

  • Microsoft 365 Business Standard vs Business Premium: Which Is Right for Your SME?

    Microsoft 365 Business Standard vs Business Premium: Which Is Right for Your SME?

    Introduction

    Choosing between Microsoft 365 Business Standard and Business Premium is a common decision for South African small and medium-sized businesses. Both plans provide essential productivity apps, cloud storage and collaboration tools, but they differ in security and device management. This article explains the practical differences in local context, so you can pick the plan that aligns with your operations, budget and regulatory needs.

    What each plan includes: a quick overview

    Business Standard

    Business Standard focuses on productivity and collaboration. Key elements include:

    • Desktop and web versions of Office apps (Word, Excel, PowerPoint, Outlook)
    • Exchange Online email with business-class mailboxes
    • OneDrive for Business with cloud storage per user
    • Microsoft Teams for chat and meetings
    • SharePoint for intranet and file sharing

    Business Premium

    Business Premium includes everything in Standard plus enhanced security and device management features important to growing firms:

    • Advanced threat protection for email and files
    • Intune for device and application management
    • Azure AD Premium features for conditional access and identity protection
    • Additional policies to secure data on mobile devices and remote endpoints

    Security and compliance: where Premium adds value

    Security is often the deciding factor. For businesses in Johannesburg or across Gauteng handling sensitive client data, Business Premium’s security stack is meaningful.

    Threat protection

    Business Premium offers enhanced email protection against phishing, malware and malicious attachments. This reduces the risk of costly security incidents that can disrupt services and damage reputation.

    Device management

    With Microsoft Intune, you can manage company devices and enforce encryption, password policies and remote wipe. For organisations using a mix of office desktops and remote laptops, this helps maintain a consistent security posture.

    Identity and access control

    Conditional access and multi-factor authentication policies let you limit access based on device health and location — a practical control for companies with remote workers or field staff.

    Productivity and collaboration: both plans cover the essentials

    If your priority is day-to-day productivity—documents, spreadsheets, email and online meetings—Business Standard already delivers the tools teams need.

    Office apps and email

    Both plans provide the full Office suite and Exchange-hosted email. For client-facing SMEs that rely on polished documents, standardised templates and professional email, these features are the baseline.

    Teams, SharePoint and OneDrive

    Collaboration tools are identical across plans. Teams for meetings and chat, SharePoint for internal sites and OneDrive for individual file storage keep teams connected whether they’re in a Sandton office or working remotely.

    Cost considerations for South African SMEs

    Pricing matters. Business Premium sits at a higher monthly cost than Business Standard because of the bundled security and management features. When evaluating cost, consider:

    • Direct subscription costs in rand per user per month
    • Potential savings from avoided incidents and reduced downtime
    • Administrative overhead — Premium can reduce time spent manually securing devices

    For many SMEs, Premium is an investment: higher license cost but lower risk and simpler management. If cost is the primary constraint and you can manage security through other means, Standard may suffice.

    Which plan suits your business? Practical recommendations

    Choose Business Standard if:

    • Your priority is cloud-based Office applications and email at an affordable price
    • You have a small, primarily office-based workforce with limited remote or mobile device use
    • You already have third-party security solutions you trust and can manage centrally

    Choose Business Premium if:

    • You handle financial, legal or client-sensitive data and need stronger protection
    • Your team uses mobile devices or remote endpoints that must be managed and secured
    • You prefer an integrated Microsoft approach to identity, threat protection and device management

    Migration, management and support considerations

    Switching plans or migrating to Microsoft 365 should be handled carefully to avoid downtime. RandTech IT advises following best practices:

    • Plan migrations outside core business hours to limit impact
    • Ensure backups and a rollback plan are in place
    • Test conditional access and device policies on a pilot group first
    • Train staff on MFA and phishing awareness to maximise security investments

    As a Gauteng-based managed IT provider, RandTech IT focuses on resolving issues quickly with experienced engineers so your business doesn’t have to learn on the client’s time.

    FAQ

    1. Can I upgrade from Business Standard to Business Premium later?

    Yes. You can upgrade licences to Business Premium when your security or management needs increase. Plan the change with your IT provider to apply policies smoothly.

    2. Do both plans include desktop Office apps?

    Yes. Both Business Standard and Business Premium include the full desktop, web and mobile Office apps for each licensed user.

    3. Is Business Premium necessary for compliance with South African data protection laws?

    Business Premium provides stronger controls that help meet data protection requirements, but compliance depends on how you configure and use the tools. Legal and regulatory needs vary by industry.

    4. Will Business Premium prevent all cyberattacks?

    No security plan can guarantee complete prevention. Business Premium reduces risk through integrated protections and management, but you still need user training, backups and good security practices.

    5. How much technical support do I need to manage Premium features?

    Premium adds complexity. Many SMEs benefit from managed services to configure Intune, conditional access and threat protection correctly and maintain them over time.

    Conclusion

    Microsoft 365 Business Standard covers essential productivity and collaboration needs at a competitive price. Business Premium adds a valuable security and device management layer for businesses that handle sensitive data, support remote devices, or want tighter control over access. For South African SMEs, the right choice depends on risk tolerance, regulatory obligations and internal IT capability.

    If you’re unsure which plan suits your business or need hands-on help migrating and securing your environment, contact RandTech IT. Our experienced engineers deliver fast, practical solutions so your team stays productive and protected.

    Contact RandTech IT for practical, experienced assistance tailored to South African SMEs.

  • IT disaster recovery plan for small business: Practical steps

    IT disaster recovery plan for small business: Practical steps

    Introduction

    Small and medium-sized businesses (SMBs) in South Africa face rising cyber threats, power instability and operational risks that can disrupt trade and client services. An IT disaster recovery plan for small business is not a luxury — it is a practical requirement to protect revenue, reputation and customer data. This article explains what a reliable plan looks like, how to build one suited to local conditions, and how RandTech IT helps businesses recover fast.

    Why a disaster recovery plan matters for South African SMBs

    Disasters range from cyberattacks and hardware failure to load shedding and natural events. For SMBs in Johannesburg and Gauteng, a few hours of downtime can cost tens of thousands of rand and harm client relationships. A documented recovery plan reduces confusion, shortens downtime and ensures legal and regulatory obligations are met.

    Key business risks to consider

    • Ransomware and malware encrypting critical data.
    • Hardware or server failure without recent backups.
    • Extended power outages and load shedding affecting on-premise equipment.
    • Loss of office access due to safety or infrastructure issues.
    • Human error or accidental data deletion.

    Core components of an effective IT disaster recovery plan

    A practical recovery plan should be clear, tested and tailored to the size and complexity of your IT environment. The essential components are:

    1. Business impact analysis (BIA)

    Identify critical systems, data and processes. For each item, determine recovery time objectives (RTOs) and recovery point objectives (RPOs). Prioritise systems that directly affect revenue, compliance and customer service.

    2. Clear roles and responsibilities

    Document who leads recovery, who contacts staff and clients, and who coordinates vendors. Include up-to-date contact details and escalation paths so the team can act quickly under pressure.

    3. Backup strategy

    Backups are central to recovery. A robust approach includes:

    • Regular automated backups of servers, endpoints and cloud data.
    • 3-2-1 rule: three copies, on two different media, with one offsite or in the cloud.
    • Encrypted backups to protect sensitive client information and comply with POPIA.
    • Retention policies that meet business and legal needs — for example, client or tax records.

    4. Recovery procedures

    Create step-by-step procedures for common scenarios: full site failure, ransomware, single server loss and user workstation replacement. Simple checklists reduce mistakes and speed up restoration.

    5. Communications plan

    Decide how you will notify staff, clients and regulators. Prepare templated messages and define the channels you will use (email, SMS, phone trees). Clear, honest communication maintains trust during interruption.

    6. Third-party vendors and cloud services

    Document all vendors, service-level agreements and account credentials for cloud platforms. Ensure contracts specify recovery expectations and support windows.

    Building a recovery plan suited to small businesses

    SMBs need pragmatic plans that fit budgets and technical ability. Use the following steps to create a lean, effective plan.

    Step 1: Start small, prioritise high-impact items

    Begin with critical systems such as accounting software, email, customer databases and payment systems. Protect these first and expand coverage over time.

    Step 2: Use managed services where appropriate

    Managed backup and recovery services reduce internal workload and leverage specialist skills. For many SMBs, an experienced provider can deploy best-practice backups, monitoring and fast recovery at a predictable monthly cost.

    Step 3: Factor in local constraints

    Plan for extended power outages and limited office access. Offsite or cloud-based recovery options and mobile connectivity plans help keep operations running when on-premise infrastructure is unavailable.

    Step 4: Test regularly

    Testing is non-negotiable. Run tabletop exercises and full restores at planned intervals. Testing validates your backups, uncovers missing documentation and trains staff on response steps.

    Practical technologies and tactics

    Choose tools that are simple to manage and compatible with your business systems.

    Backup types to consider

    • Image-based backups for servers and critical workstations.
    • File-level backups for shared drives and important folders.
    • Cloud-native backups for SaaS platforms (e.g., Microsoft 365 backups).
    • Offsite replication or cold storage for long-term retention.

    Security measures that improve recoverability

    • Endpoint protection and email filtering to reduce the risk of ransomware.
    • Multi-factor authentication on administrative accounts and backups.
    • Network segmentation to isolate infected systems and limit spread.
    • Regular patching and vulnerability scanning.

    Cost considerations and budgeting

    SMBs must balance protection with cost. Typical cost drivers include data volume, required RTO/RPO and the choice between on-premise vs cloud recovery.

    • Cloud backup providers usually charge per GB/month — this provides predictable operating expense in rand.
    • Managed recovery services combine monitoring, backups and recovery support into a single fee, helping avoid surprise costs during an incident.
    • Investing in testing and documentation reduces the likelihood of costly mistakes during actual incidents.

    How RandTech IT helps small businesses recover fast

    RandTech IT focuses on fast, experienced response. Our engineers prioritise practical restoration over experimental troubleshooting on client time. Services we commonly provide include:

    • Business impact analysis and prioritised recovery planning.
    • Managed backup and rapid recovery for servers, endpoints and cloud services.
    • Ransomware response and encrypted backup restoration.
    • Disaster recovery testing and staff tabletop exercises.

    Frequently asked questions

    How often should small businesses test their disaster recovery plan?

    At minimum, conduct a yearly full restore test and quarterly tabletop exercises. Increase frequency if you change systems or scale operations rapidly.

    Is cloud backup enough for a small business in Johannesburg?

    Cloud backup is a strong foundation, especially when combined with local controls such as endpoint protection and MFA. Consider hybrid strategies if you need very fast local restores during load shedding.

    What is a reasonable recovery time objective (RTO) for an SMB?

    RTOs vary by function. Critical customer-facing systems often require hours, while non-critical functions can accept days. Define RTOs based on revenue impact and client obligations.

    How do we protect backups from ransomware?

    Use immutable or air-gapped backups where possible, enable encryption and restrict backup access to authorised accounts only. Regular testing ensures backups are usable after an attack.

    Do small businesses need a written plan or is an IT technician enough?

    A written plan is essential. It documents responsibilities, contact details and step-by-step procedures so any qualified technician or manager can act quickly, even under stress.

    Conclusion

    An IT disaster recovery plan for small business equips South African SMBs to respond to incidents with confidence and speed. By identifying priorities, using managed services where practical, securing and testing backups, and documenting clear procedures, your business limits downtime and preserves client trust.

    Need experienced help building or testing your recovery plan? Contact RandTech IT to speak with engineers who deliver fast, practical recovery and ongoing protection tailored to South African small businesses.

  • Business Wi‑Fi Problems and Solutions for SA SMEs

    Business Wi‑Fi Problems and Solutions for SA SMEs

    Introduction

    Reliable Wi‑Fi is essential for small and medium-sized businesses (SMEs) in South Africa. When wireless networks are slow, unreliable or insecure, productivity drops and risk increases. This article explains common business Wi‑Fi problems and practical solutions tailored for South African SMEs, emphasising fast, experienced troubleshooting and managed options.

    Common Business Wi‑Fi Problems

    Poor Coverage and Dead Zones

    Many offices, warehouses and blended workspaces suffer from areas with weak or no signal. Thick walls, server closets and metal shelving in warehouses can block wireless signals.

    Unreliable Performance and Dropouts

    Intermittent connectivity, frequent reauthentications, and slow throughput during peak times are frequent complaints. These may stem from congestion, outdated hardware, or ISP instability.

    Security Vulnerabilities

    Open or weakly protected networks expose businesses to data theft, ransomware infection and unauthorised access. Guest networks left on the same VLAN as internal systems are a common misconfiguration.

    Poor Network Planning for Growth

    SMEs sometimes deploy consumer-grade routers or small office gear that cannot scale with additional users, IoT devices, or cloud applications. This leads to recurrent upgrades and service interruptions.

    ISP and Backhaul Issues

    Even with an optimised Wi‑Fi layer, a congested or unstable internet connection from the ISP (including last‑mile problems) will limit performance.

    Diagnosing the Root Causes

    Effective solutions start with diagnosis. Follow a structured approach:

    • Map signal strength across the workspace using a site survey or Wi‑Fi analyser app.
    • Check client device behaviour—older laptops and phones can struggle on modern networks.
    • Review access point placement, antenna orientation and channel usage.
    • Test internet backhaul separately from the Wi‑Fi to isolate ISP issues.
    • Inspect network segmentation and security settings for misconfigurations.

    Practical Solutions for Common Problems

    Improve Coverage: Proper Planning and Access Point Placement

    Deploy access points (APs) based on a site survey, not guesswork. In multi-room offices and warehouses, use multiple APs or a mesh design to ensure even coverage. Place APs centrally in open areas, avoid metal obstructions, and use ceiling mounts where feasible.

    Upgrade to Business-Grade Hardware

    Consumer routers are inexpensive but lack features businesses need: central management, VLANs, WPA3 support and higher client capacity. Choose business-grade APs and controllers that support future growth and offer firmware updates.

    Reduce Congestion with Proper Channel and Band Management

    Use 5 GHz bands for performance-critical devices and reserve 2.4 GHz for legacy equipment. Configure channels to minimise co‑channel interference and enable band steering where supported.

    Segment Networks for Security and Performance

    Create separate VLANs for staff devices, guests, VoIP and IoT. Apply appropriate firewall rules and quality of service (QoS) policies so voice and cloud applications receive priority bandwidth.

    Secure Your Wireless Environment

    • Use WPA2‑Enterprise or WPA3 with RADIUS for staff authentication where possible.
    • Enable guest captive portals with internet-only access and short session timeouts.
    • Keep firmware patched and disable unused services (WPS, UPnP) on APs and routers.

    Address ISP and Backhaul Limitations

    Test throughput during peak and off-peak hours. If speeds are inconsistent, discuss SLAs with the ISP or consider bonded links, fixed wireless, or a secondary backup connection for resilience. Remember that in Gauteng and Johannesburg, many SMEs have multiple provider options, but availability varies by area.

    Plan for Scale and Manageability

    Choose solutions that centralise management and reporting. Cloud-managed Wi‑Fi allows remote monitoring, configuration, and rapid troubleshooting without on‑site learning. This reduces downtime and keeps experienced engineers focused on resolution.

    When to Use Managed Services

    Managed Wi‑Fi services make sense when you want predictable performance without dedicating internal IT time to network upkeep. Benefits include:

    • Proactive monitoring and faster incident response
    • Regular firmware and security updates
    • Capacity planning and on‑site interventions by experienced engineers
    • Clear escalation procedures and documented change control

    For South African SMEs, outsourcing to a local managed provider reduces the time lost to troubleshooting and avoids the risk of inexperienced staff experimenting on live systems.

    Cost Considerations for South African SMEs

    Budget realistically. Initial investments in business-grade APs and proper cabling usually pay off through reduced downtime and fewer emergency callouts. Managed services are typically billed monthly; compare scope and response SLAs rather than just price. Expect variable costs depending on site size, device density and security requirements.

    Checklist: Quick Actions You Can Take Today

    1. Run a basic Wi‑Fi analyser app to identify weak spots.
    2. Separate guest Wi‑Fi from internal networks.
    3. Ensure firmware for routers and APs is up to date.
    4. Move critical services to 5 GHz where devices support it.
    5. Document device counts and peak usage times for planning.

    FAQ

    How do I know if the problem is Wi‑Fi or my internet connection?

    Test internet speed directly from a wired device connected to your network. If wired speeds are stable but wireless is slow, the issue is likely the Wi‑Fi layer. If both are slow, check with your ISP.

    Are mesh systems suitable for small businesses?

    Yes, modern mesh systems can work well for many SMEs, especially in irregular office layouts. Use business-grade mesh solutions with central management rather than consumer kits for better performance and security.

    What security steps should every SME take immediately?

    At minimum: enable WPA2/WPA3, separate guest access, keep firmware updated, and disable default admin accounts. For higher risk environments, implement RADIUS and network segmentation.

    How many access points does my office need?

    That depends on floor area, construction materials and client density. A basic office may need one AP per 100–250 m², while dense workplaces require more. A site survey gives an accurate count.

    Can older devices cause Wi‑Fi problems?

    Yes. Legacy devices that only support 2.4 GHz or older Wi‑Fi standards can slow the network. Where possible, update critical hardware or place legacy devices on a separate VLAN.

    Should I manage Wi‑Fi myself or hire a provider?

    If you lack experienced networking staff, managed services save time and reduce risk. A trusted provider can deliver faster resolution and predictable performance, freeing you to focus on business operations.

    Conclusion

    Business Wi‑Fi problems are common but solvable with proper diagnosis, business-grade equipment, secure network practices and professional support. For South African SMEs, the right combination of local expertise and managed services ensures fast resolution and reliable performance without using your team as a learning ground.

    Contact RandTech IT if you need practical, experienced assistance diagnosing or upgrading your business Wi‑Fi. Our engineers prioritise fast, effective fixes so your business stays connected and secure.