Toronto managed IT + cybersecurity for businesses. Practical support and security guidance. Learn more at https://xitter.cf/t.co/HjxxQAacag
Toronto, ON / GTA
Joined January 2010
- Tweets6.6K
- Following71
- Followers47
- Likes12
Pinned Tweet
Most “AI breaches” in SMB IT are still bad permissions with a better search box.
Messy guest access + wide SharePoint sharing, and Copilot surfaces it fast. That is the tenancy telling the truth.
Fix access first. Then turn AI features up.
Clinics: when an old front desk PC gets replaced, where does it go?
A storage closet. A staff member's kid. The curb. Often with years of patient info still on the drive.
Wipe it properly or have the drive destroyed, and note which machine and when. What happens to yours?
ALT Front desk receptionist in a bright medical clinic helping two patients with paperwork, with a desktop monitor on the counter.
A call that sounds exactly like your boss, asking for a quick payment before 3. Would your team call back on a saved number first?
SecureAware runs SMS and voice phishing simulations for orgs up to ~300 users.
secureaware.app
Restaurant owners, quick one: is your guest Wi-Fi on the same network as your POS and the office PC?
The password's on the chalkboard by the bar. So anyone with a phone and a latte shares a network with your card terminals.
A separate guest network is cheap. Split yours yet?
ALT Smiling bartender in a black shirt at the bar counter, setting down a cocktail for a customer
Almost every machine shop has one: the old PC beside the CNC that nobody touches because the vendor software only runs on it.
Fine. Don't leave it on the same network as email and accounting. Give it its own segment and keep a backup image.
Got one of these on your floor?
ALT A young machinist in safety glasses and a blue apron stands beside a small CNC machine in a workshop, holding a handheld controller.
A property manager leaves, their Microsoft 365 account gets deleted, and by default their OneDrive is kept just 30 days after that.
If the vendor contracts, lease files and inspection photos lived there, so did the only copy.
Building files go in SharePoint. Where are yours?
ALT A man in a shirt, tie and vest holds a cardboard box of folders and papers as he packs up his office desk.
Myth: it's normal for clients to email their accountant a T4, their SIN and a photo of their driver's licence.
Reality: that inbox becomes a searchable pile of ID. One phished password and it's all there.
A client portal fixes most of that.
How do clients send you documents?
ALT An accountant at a sunny desk flips through a folder of client paperwork next to a laptop, a calculator and a phone.
Friday check for real estate brokerages: find deal folders shared as "anyone with the link."
Usually it's an agent rushing a buyer's ID or a signed offer to a lawyer at 9pm. The link works. Nobody ever turns it off.
Who at your brokerage would know where those links are?
ALT A client signs a document at a small glass table while a real estate agent beside her reviews the papers.
4:50 on a Friday and the phone rings. At Group 4 Networks, Riley (our VocalStaff AI receptionist) picks up, sorts what can wait until Monday, and gets the urgent calls to a tech with the notes already written.
vocalstaff.ai
Small thing dental clinics skip: locking the front desk when nobody's sitting there.
The practice management system stays open with today's schedule and patient notes on a screen that faces the waiting room.
Does yours lock between patients?
ALT Doctor at a clinic desk with a computer keyboard and monitor reviews a chart while speaking with a patient across the desk.
Nonprofits run on volunteers and summer students. Their Microsoft 365 accounts tend to outlive them.
Most offices we look at still have a login from someone who helped with a fundraiser years ago, and it still opens the donor list.
Who owns offboarding at your org?
ALT Three volunteers in masks and lanyards look at a laptop surrounded by boxes labelled Donations.
Worth checking at any law firm on Microsoft 365: inbox rules that forward mail to a personal Gmail.
It's usually innocent. A lawyer wanted client email on their phone years ago.
Now privileged mail sits in an account the firm doesn't control.
When did you last look?
ALT Lawyer in a suit seated at a desk with case files, papers, a laptop and a small Lady Justice statue.
Most construction offices we see have a site trailer laptop that stays signed into payroll overnight.
Someone grabs it for a quote, leaves it open, and the trailer Wi-Fi password hasn't changed since last summer.
If that laptop walks off, what gets locked first?
ALT Construction engineer in a hard hat and safety vest using a tablet on a job site.
Friday check before the weekend: review M365 guest access and external sharing. We've seen old guests and anyone-links stay live long after a project ends. A quick clean-up now means fewer Monday surprises.
g4ns.com/compliance-as-a-ser…
linkedin.com/feed/update/urn…
Passing an email phishing test doesn't mean your team is ready for a fake "bank fraud" call. SecureAware runs SMS and voice phishing simulations for orgs up to ~300 users.
secureaware.app
Your IT person takes two weeks off. Day three, the firewall admin password lives only in their head.
We've seen GTA offices fix it with a shared break-glass login, a one-page vendor map, clear lanes between in-house IT and the MSP.
g4ns.com/it-support-toronto
linkedin.com/feed/update/urn…
Someone clicks a phishing link Monday, tells IT Wednesday. That gap is where the damage happens.
We've seen GTA teams recover fast when reporting is easy and no-blame: one Report button, a thank-you every time, then a quick reset.
g4ns.com/cybersecurity-servi…
linkedin.com/feed/update/urn…
First patient in the chair at 8:05, and the schedule screen just spins.
Can your clinic pull today's schedule and medical alerts offline? Tested an imaging restore lately?
We've seen a printed downtime plan save the morning.
g4ns.com/dental-it-toronto
linkedin.com/feed/update/urn…
A partner's mailbox starts sending invoice reminders nobody wrote. Who resets it? Who calls the insurer?
We've walked GTA law firms through that first-hour tabletop: a printed call list beats improvising.
g4ns.com/legal-it-toronto
linkedin.com/feed/update/urn…
An employee left two months ago. Their Microsoft 365 login still works.
We've walked GTA SMBs through inactive-identity cleanups: disable the account the same day HR exits, not "we'll get to it."
g4ns.com/cybersecurity-toron…
linkedin.com/feed/update/urn…
Missed after-hours calls and cold callbacks cost more than another headset. We run VocalStaff / Riley daily at Group 4 Networks for AI reception + service desk intake.
vocalstaff.ai