Business operations & technology consulting · 290 Broadway, New York Mon–Fri, 9:00–18:00 ET · +1 (858) 401-3444 · support@uasongiro.com
HomeInsights › IT & Cloud

A plain-English IT checklist for a 25-person company

Not a best-practice framework. The twelve things we check first when we take over a small company's IT.

By Jennifer Miller · May 14, 2026 · IT & Cloud

Access and identity

  • Every employee has their own named account; no shared logins.
  • Multi-factor authentication is enforced, not optional.
  • There is a written offboarding checklist and someone owns it.
  • Administrator rights belong to at most two people.

Data and continuity

  • Company files live in one managed location, not on desktops.
  • Backups exist, are automatic, and someone has restored a file from them this quarter.
  • Email retention matches what your accountant and attorney expect.
  • Critical vendor and license records are documented outside one person's inbox.

Devices and support

  • Laptops are encrypted and patched on a schedule.
  • There is a known path for an employee to report a problem.
  • Software spend is reviewed annually; unused seats get cancelled.
  • Someone is accountable for IT in writing, whether internal or external.

Why this order

Identity failures cause the incidents that end companies. Fancier tooling can wait until the four items in the first section are true.

Discussing this at your company? Call +1 (858) 401-3444 or email support@uasongiro.com and we will happily give you an honest read on your situation before anyone talks about a proposal.

Keep reading

Let's look at your operations together

A 30-minute call is usually enough to tell whether we can help you and what it would cost. No sales script, no obligation.